{"description":"Trending threats, MITRE ATT\u0026CK coverage, and detection metadata. Fed continuously.","favicon":"https://feed.craftedsignal.io/favicon-32x32.png","feed_url":"https://feed.craftedsignal.io/cpes/cpe2.3axwikixwiki6.2/feed.json","home_page_url":"https://feed.craftedsignal.io/","icon":"https://feed.craftedsignal.io/apple-touch-icon.png","items":[{"_cs_actors":[],"_cs_cpes":["cpe:2.3:a:apache:log4j:*:*:*:*:*:*:*:*","cpe:2.3:a:xwiki:xwiki:*:*:*:*:*:*:*:*","cpe:2.3:a:xwiki:xwiki:6.2:*:*:*:*:*:*:*","cpe:2.3:a:xwiki:xwiki:3.2:milestone3:*:*:*:*:*:*","cpe:2.3:a:xwiki:xwiki:14.7:rc1:*:*:*:*:*:*"],"_cs_cves":[{"cvss":7.5,"id":"CVE-2023-26464"},{"cvss":9.9,"id":"CVE-2023-26472"},{"cvss":9.9,"id":"CVE-2023-26474"},{"cvss":7.5,"id":"CVE-2023-26476"}],"_cs_exploited":false,"_cs_has_poc":false,"_cs_poc_references":[],"_cs_products":["AptioV"],"_cs_severities":["medium"],"_cs_tags":[],"_cs_type":"advisory","_cs_vendors":["AMI"],"content_html":"\u003cp\u003eThe BSI has reported multiple security vulnerabilities affecting AMI AptioV, a widely used UEFI firmware implementation. These flaws impact the firmware's integrity and security posture, potentially allowing local attackers to execute arbitrary code, modify system data, escalate privileges, and gain unauthorized access to sensitive information. The vulnerabilities identified include CVE-2023-26463, CVE-2023-26464, CVE-2023-26465, CVE-2023-26466, CVE-2023-26467, CVE-2023-26468, CVE-2023-26469, CVE-2023-26470, CVE-2023-26471, CVE-2023-26472, CVE-2023-26473, CVE-2023-26474, CVE-2023-26475, CVE-2023-26476, CVE-2023-26477, CVE-2023-26478, CVE-2023-26479, and CVE-2023-26480. Because these issues exist at the firmware level, exploitation could lead to persistent compromise that survives operating system reinstallation, making detection and remediation significantly more complex for enterprise environments. Organizations should prioritize checking vendor-specific firmware update channels for patches addressing these identifiers.\u003c/p\u003e\n\u003ch2 id=\"impact\"\u003eImpact\u003c/h2\u003e\n\u003cp\u003eSuccessful exploitation of these vulnerabilities allows local attackers to compromise the foundation of the system boot process. This can result in full control over the hardware, bypassing OS-level security controls, persistent unauthorized access, and the exfiltration of sensitive data that would otherwise be protected by Secure Boot or other platform security features. These flaws affect a broad range of hardware platforms that utilize AMI AptioV firmware.\u003c/p\u003e\n\u003ch2 id=\"recommendation\"\u003eRecommendation\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eIdentify systems utilizing AMI AptioV firmware across the fleet via hardware inventory and BIOS/UEFI version reporting.\u003c/li\u003e\n\u003cli\u003eCoordinate with hardware OEMs (Original Equipment Manufacturers) to identify and deploy applicable firmware updates addressing the listed CVEs.\u003c/li\u003e\n\u003cli\u003eImplement secure boot and firmware integrity monitoring where supported to detect unauthorized modifications to the UEFI environment.\u003c/li\u003e\n\u003cli\u003ePrioritize patch management for high-value assets and systems where the impact of persistent firmware compromise is most severe.\u003c/li\u003e\n\u003c/ul\u003e\n","date_modified":"2026-10-14T16:24:20Z","date_published":"2026-10-14T16:24:20Z","id":"https://feed.craftedsignal.io/briefs/2026-10-ami-aptiov-vulnerabilities/","summary":"Multiple vulnerabilities in AMI AptioV UEFI firmware allow local attackers to achieve arbitrary code execution, data manipulation, privilege escalation, and information disclosure.","title":"Multiple Vulnerabilities in AMI AptioV Firmware","url":"https://feed.craftedsignal.io/briefs/2026-10-ami-aptiov-vulnerabilities/"}],"language":"en","title":"CraftedSignal Threat Feed - Cpe:2.3:a:xwiki:xwiki:6.2:*:*:*:*:*:*:*","version":"https://jsonfeed.org/version/1.1"}