CVE-2025-7026
Last modified
CVE-2025-7026 is a high-severity vulnerability rated 8.2/10 on the CVSS scale. A vulnerability in the Software SMI handler (SwSmiInputValue 0xB2) allows a local attacker to control the RBX register, which is used as an unchecked pointer in the CommandRcx0 function. If the contents at RBX match certain expected values (e.g., '$DB$' or '2DB$'), the function performs arbitrary writes to System Management RAM (SMRAM), leading to potential privilege escalation to System Management Mode (SMM) and persistent firmware compromise.. EPSS estimates a 0.20% chance of exploitation in the next 30 days.
Description
A vulnerability in the Software SMI handler (SwSmiInputValue 0xB2) allows a local attacker to control the RBX register, which is used as an unchecked pointer in the CommandRcx0 function. If the contents at RBX match certain expected values (e.g., '$DB$' or '2DB$'), the function performs arbitrary writes to System Management RAM (SMRAM), leading to potential privilege escalation to System Management Mode (SMM) and persistent firmware compromise.
Metrics
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H
References
Timeline
- Published
- Last Modified
- Status
- Deferred
Frequently Asked Questions
What is CVE-2025-7026?
How severe is CVE-2025-7026?
How do I fix CVE-2025-7026?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2025
- CVE-2025-70247Stack buffer overflow vulnerability in D-Link DIR-513 v1.10 …7.5
- CVE-2025-70249Stack buffer overflow vulnerability in D-Link DIR-513 v1.10 …7.5
- CVE-2025-7025A memory abuse issue exists in the Rockwell Automation Arena…7.8
- CVE-2025-70250Stack buffer overflow vulnerability in D-Link DIR-513 v1.10 …7.5
- CVE-2025-70251Stack buffer overflow vulnerability in D-Link DIR-513 v1.10 …7.5
- CVE-2025-70252An issue was discovered in /goform/WifiWpsStart in Tenda AC6…7.5
- CVE-2025-7027A vulnerability in the Software SMI handler (SwSmiInputValue…8.2
- CVE-2025-7028A vulnerability in the Software SMI handler (SwSmiInputValue…7.8
- CVE-2025-7029A vulnerability in the Software SMI handler (SwSmiInputValue…8.2
- CVE-2025-70296A stored HTML injection vulnerability in the Recipe Notes re…5.4
- CVE-2025-70297A stored cross-site scripting (XSS) vulnerability in the rec…6.1
- CVE-2025-70298GPAC v2.4.0 was discovered to contain an out-of-bounds read …8.2
Are you affected by CVE-2025-7026?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST