SEPTEMBER 20, 2026
Live Feed
Back to database
Case File

CVE-2026-62430

HIGH · CVSS 7.5 EPSS 0.24%

Source: NVD + CISA KEV + EPSS · Published 2026-07-28 · Last synced 2026-08-27

CyberRota Analysis

AI-Generated

The vulnerability allows a guest in a virtualized environment to manipulate the index used to access CMOS memory, leading to potential out-of-bounds read access. This flaw can result in unauthorized data exposure or system instability, making it critical for organizations utilizing Xen hypervisors to prioritize remediation efforts. System administrators and security teams should assess their environments for affected configurations and implement necessary patches or mitigations.

CVE
CVE-2026-62430
Severity
HIGH
CVSS
7.5
EPSS
0.24%

Original NVD Description

Accesses to the CMOS memory contents are done using an indirect IO port pair. Therefore Xen needs to cache the guest chosen index, and one of the usages of the index didn't take the necessary locking to avoid concurrent changes. As a result, a guest could change the index after it being checked, causing a subsequent out-of-bound read access to the contents of an array.