{"uuid": "47b3ea71-70e8-406f-b290-70d25b67ab8d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-12855", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/117239200044346852", "content": "CVE-2026-12855: HIGH-severity vuln in InsydeH2O firmware (HP). Local attackers with high privileges may execute arbitrary code due to improper input validation. No patch yet \u2014 restrict local admin access. https://radar.offseq.com/threat/cve-2026-12855-cwe-20-improper-input-validation-in-insyde-software-insydeh2o-96c11fc7beb122a7 #OffSeq #Vulnerability #Firmware #Infosec", "creation_timestamp": "2026-09-09T04:30:25.698257Z"}