CVE-2026-0893
Received Received - Intake

Exposure of Sensitive Information in AMI APTIOV BIOS

Vulnerability report for CVE-2026-0893, including description, CVSS score, EPSS score, affected products, exploitability, helpful resources, and attack-flow context.

Publication date: 2026-10-13

Last updated on: 2026-10-13

Assigner: AMI

Description

AMI APTIOV contains a vulnerability in BIOS where an attacker may cause “Exposure of Sensitive Information to an Unauthorized Actor” by local access. Successful exploitation of this vulnerability can lead to information disclosure, privilege escalation, and further impact on Confidentiality, Integrity, and Availability.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-10-13
Last Modified
2026-10-13
Generated
2026-10-13
AI Q&A
2026-10-13
EPSS Evaluated
N/A
NVD
EUVD

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
AMI AptioV AptioV_5.0

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-213 The product's intended functionality exposes information to certain actors in accordance with the developer's security policy, but this information is regarded as sensitive according to the intended security policies of other stakeholders such as the product's administrator, users, or others whose information is being processed.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

AMI APTIOV BIOS has a vulnerability allowing local attackers to expose sensitive information. Exploitation may lead to information disclosure, privilege escalation, and impact confidentiality, integrity, and availability.

Detection Guidance

Detection of this vulnerability requires checking the BIOS version and configuration of AMI AptioV systems. No specific commands are provided in the available context. Contact AMI support or check their documentation for BIOS integrity checks.

Impact Analysis

An attacker with local access could steal sensitive data, gain higher privileges, or disrupt system operations, affecting Confidentiality, Integrity, and Availability.

Compliance Impact

This vulnerability may lead to unauthorized data exposure, potentially violating GDPR (data protection) and HIPAA (health data security) requirements for safeguarding sensitive information.

Mitigation Strategies

Update the BIOS to the latest version provided by AMI. Restrict physical and logical access to systems running AMI AptioV. Monitor for unauthorized changes to BIOS settings.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-0893. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart