Microsoft WinRE Vulnerability Allows Hackers to Bypass UEFI/BIOS Password Enforcement

A newly disclosed WinRE vulnerability (CVE-2026-45585) can be abused via the UEFI BootNext NVRAM variable to bypass firmware pre-boot authentication on affected Windows 10/11 systems, enabling attackers with physical or administrative access to enter recovery environments, change boot settings, and potentially weaken protections like BitLocker; Microsoft and security experts recommend hardening recovery environments, enforcing TPM+PIN or startup keys, restricting NVRAM modifications, deploying EDR/measured boot, and improving physical security.