CVE-2026-10589

MediumCVSS 6.0/10Last modified Jul 16, 2026

Description

A potential out of bounds write vulnerability could allow a local privileged attacker to execute code in System Management Mode.

Metrics

CVSS 3.1 6.0/10CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:H

Weakness enumeration

CWE-787

Affected software

Source: the vendor's advisory (CNA). NVD analysis pending.

No affected versions have been published.

Timeline

Published
Jul 16, 2026
Last modified
Jul 16, 2026
NVD status
Awaiting Analysis

Related CVEs from 2026

CVE-2026-1058906.5Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Liquid Web / StellarWP Gutenberg BlockCVE-2026-1058914.3Missing Authorization vulnerability in Liquid Web / StellarWP Event Tickets event-tickets allows Exploiting Incorrectly Configured Access CoCVE-2026-1058929.8Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in rtCamp Inc. rtMedia for WordPress, BuddyPresCVE-2026-1058935.3Authorization Bypass Through User-Controlled Key vulnerability in Liquid Web / StellarWP Event Tickets event-tickets allows Manipulating UseCVE-2026-1058959.9Adobe Experience Manager is affected by an Improper Input Validation vulnerability that could result in arbitrary code execution in the contCVE-2026-1058965.5Photoshop Desktop is affected by a NULL Pointer Dereference vulnerability that could result in an application denial-of-service. An attackerCVE-2026-1058978.6ColdFusion is affected by a Server-Side Request Forgery (SSRF) vulnerability that could result in privilege escalation. Exploitation of thisCVE-2026-1058988.2ColdFusion is affected by an Incorrect Authorization vulnerability that could result in arbitrary code execution in the context of the curreCVE-2026-10589910.0ColdFusion is affected by an Unrestricted Upload of File with Dangerous Type vulnerability that could result in arbitrary code execution in CVE-2026-10599.8A security vulnerability has been detected in FeMiner wms up to 9cad1f1b179a98b9547fd003c23b07c7594775fa. Affected by this vulnerability is CVE-2026-105904.4A potential missing authentication vulnerability could allow a local privileged attacker to use WMI commands to arbitrarily trigger a SystemCVE-2026-1059007.5ColdFusion is affected by an Improper Input Validation vulnerability that could result in an application denial-of-service. An attacker coul
CVE-2026-10589: Medium severity, CVSS 6.0 | Vulnix