BDS Module Bypass Secure Boot Vulnerability, September 2026

Findings:

Supermicro is aware of a potential vulnerability where an attacker with the ability to create additional UEFI boot entries can reference the UEFI Shell even when standard controls are implemented to prevent its execution. An attacker could then exploit the UEFI Shell and its startup scripting capabilities to modify the pre-boot environment, including overwriting Secure Boot-related memory values, and execute unauthorized code during the early boot process.

CVE IDDescriptionCVSS Severity
  • CVE-2026-33197
BDS Module Bypass Secure Boot

High (8.7)

CVSS:4.0/AV:L/AC:L/AT:P/PR:H/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H

Affected products:

CVE-2026-33197
X13-Alder LakeBIOS FW Version with the Fix
X13SA1-CPUv5.3
X13SAEv5.3
X13SAE-Fv5.3
X13SAN-H/-E/-L/-Cv5.3
X13SAQv5.3
X13SAV-LVDSv5.3
X13SAV-PSv5.3
X13SAWv5.3
X13SAZ-Fv5.3
X13SAZ-Qv5.3
A4-Amston LakeBIOS FW Version with the Fix
A4SAN-H/-E/-L/-WOHSv1.5
A4SAP-H/E/Lv1.5
X14-Arrow LakeBIOS FW Version with the Fix
X14SAEv2.1
X14SAE-Fv2.1
X14SAV-LVDSv2.1
X14SAV-TLN4F/Fv2.1
X14SAZ-TLN4F/Fv2.1
X14-Birch StreamBIOS FW Version with the Fix
X14SBHv1.6
X14SBW-F/-TFv1.6
X14SBT-Gv1.6
X14SBHMv1.6
X14SBSCv1.6
X14SBH-APv1.6
X14SBT-GAPv1.6
X14SBM-TF/TP4Fv1.6
X14DBG-GDv1.6
X14DBI-(T)v1.6
X14DBG-XAPv1.6
X14DBM-APv1.6
X14DBM-SPv1.6
X14DBT-Bv1.6
X14DBHMv1.6
X14DBG-MAPv1.6
X14DBT-FAP-(TEST) / X14DBT-FLAPv1.6
X13-CatlowBIOS FW Version with the Fix
X13SCL-IFv2.6
X13SCL-Fv2.6
X13SCHv2.6
X13SCD-Fv2.6
X13SCWv2.6
B4SC1v2.6
X12-Cedar IslandBIOS FW Version with the Fix
X12QCH+v2.5
X12-Comet LakeBIOS FW Version with the Fix
X12SAE/X12SCA-FBy request
X12SCQBy request
X12SCV-LVDSBy request
X12SCV-WBy request
X12SCZ-TLN4F/QF/FBy request
C9Z490-PGWEOL
X13-Eagle StreamBIOS FW Version with the Fix
X13DEHv3.2
X13DEG-OADv3.2
X13DEG-OAv3.2
X13DGUv3.2
X13QEH+v3.2
X13DAI-Tv3.2
X13DDWv3.2
B13DEEv3.2
B13DETv3.2
B13SEE-CPU-25Gv3.2
B13SEGv3.2
X13DEG-Mv3.2
X13DEG-QTv3.2
X13DEG-Rv3.2
X13DEG-PVCv3.2
X13DEI(-T)v3.2
X13DEMv3.2
X13DET-Bv3.2
X13DSF-Av3.2
X13SEDW-Fv3.2
X13SEED-F/SFv3.2
X13SEFR-Av3.2
X13SEI-TF/-Fv3.2
X13SEM-TFv3.2
X13SET-G/-GCv3.2
X13SET-PTv3.2
X13SEVR-SP13Fv3.2
X13SEWv3.2
X13SEW-TF-OS1v3.2
X13OEiv3.2
A3-Elkhart LakeBIOS FW Version with the Fix
A3SEVBy request
X13-FishHawk FallsBIOS FW Version with the Fix
X13SRA-TFv2.8
X13SWA-T(F)v2.8
X12-IdavilleBIOS FW Version with the Fix
X12SDV-SPT4Fv2.4
X12SDV-SP6Fv2.4
X12SDV-SPT8Fv2.4
B3SD1v2.4
A3-JacobsvilleBIOS FW Version with the Fix
A3SPI-4C/8C-LN6PF/HLN4FBy request
A3SSV-8C/16C/24C-SPLN10FBy request
X14-KaseyvilleBIOS FW Version with the Fix
X14SDV-SP3Fv1.5
X14SDW-SP9Fv1.5
X14-Panther LakeBIOS FW Version with the Fix
X14SPNv1.1
X11-PurleyBIOS FW Version with the Fix
X11SPI-TFBy request
X11SPI-FBy request
X11SPG-TFBy request
X11SPH-nCT(P)FBy request
X11SPL-FBy request
X11SPM-(T)F/TPFBy request
X11SPW-(C)TFBy request
X11DPI-N/NT/NiBy request
X11DAI-NBy request
X11DGQ-RBy request
X11DPG-HGX2By request
X11DPG-OTBy request
X11DPS-REBy request
X11DACBy request
X11DGOBy request
X11QPH+By request
X11QPLBy request
X11DPIBy request
B11DPEBy request
X11DPD-L/M25By request
X11DPG-QT (32MB)By request
X11DPG-QT (64MB)By request
X11DPL-iBy request
X11DPUBy request
X11DPU-VBy request
X11DPU-RBy request
X11DPX-TBy request
X11DSC+By request
X11DDW-L/N(T)By request
X11DPFF-SNBy request
X11DPFR-S(N)By request
X11DPH-T(Q)(F)By request
X11DPT-BBy request
X11DPT-PSBy request
X11DPU-Z+By request
B11SPEBy request
B11SREBy request
X11SRI-IFBy request
X13-Raptor LakeBIOS FW Version with the Fix
X13SRN-H/-E/-WOHSv5.3
X12/C9-Rocket LakeBIOS FW Version with the Fix
X12SAE-5By request
X12SCA-5FBy request
C9Z590-CG(W)By request
X12-TatlowBIOS FW Version with the Fix
X12STWv2.6
X12STHv2.6
X12STDv2.6
X12STEv2.6
X12STL-IFv2.6
X12STL-Fv2.6
B3ST1v2.6
X12-Tiger LakeBIOS FW Version with the Fix
X12STNBy request
X12-WhitleyBIOS FW Version with the Fix
B12DPE-6v2.7
B12DPT-6v2.7
B12SPE-CPUv2.7
X12DAI-N6v2.7
X12DGO-6v2.7
X12DGQ-Rv2.7
X12DPG-ARv2.7
X12DPG-OA6v2.7
X12DPG-OA6-GD2v2.7
X12DPG-QRv2.7
X12DPG-QBT6v2.7
X12DPG-QT6v2.7
X12DPG-U6v2.7
X12DPI-N(T)6v2.7
X12DPIv2.7
X12DPL-i6/NT6v2.7
X12DDW-A6v2.7
X12DGUv2.7
X12DHM-6v2.7
X12DPD-A/AM25v2.7
X12DPFR-AN6v2.7
X12DPT-B6v2.7
X12DPT-PT6/-PT46v2.7
X12DPU-6v2.7
X12DSC-6v2.7
X12DSC-A6v2.7
X12SPO-(NT)Fv2.7
X12SPM Seriesv2.7
X12SPW-(T)Fv2.7
X12SPL-LN4Fv2.7
X12SPZ-SPLN6F/LN4Fv2.7
X12SPI-TFv2.7
X12SPA-TFv2.7
X12SPED-Fv2.7
X12SPG-NFv2.7
X12SPT-PTv2.7
X12SPT-G(C)v2.7

Mitigation:

Supermicro updated BIOS firmware to mitigate this issue. Please check the release notes for resolution.

Exploitation and Public Announcements:

Supermicro is not aware of any public announcements or malicious use of the vulnerabilities described in this advisory.

Resources: