{"vulnerability": "CVE-2026-12855", "sightings": [{"uuid": "47b3ea71-70e8-406f-b290-70d25b67ab8d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-12855", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/117239200044346852", "content": "CVE-2026-12855: HIGH-severity vuln in InsydeH2O firmware (HP). Local attackers with high privileges may execute arbitrary code due to improper input validation. No patch yet \u2014 restrict local admin access. https://radar.offseq.com/threat/cve-2026-12855-cwe-20-improper-input-validation-in-insyde-software-insydeh2o-96c11fc7beb122a7 #OffSeq #Vulnerability #Firmware #Infosec", "creation_timestamp": "2026-09-09T04:30:25.698257Z"}, {"uuid": "7cfadddc-746e-4f0e-bdfb-025fcb1f8121", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-12855", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mv2pbpue7o24", "content": "InsydeH2O firmware for HP hit by HIGH-severity vuln (CVE-2026-12855). Flawed input validation may allow code execution if local high privileges are compromised. No patch \u2014 limit admin rights & monitor for updates. https://radar.offseq.com/threat/cve-2026-12855-cwe-20-improper-input-validation-in-...", "creation_timestamp": "2026-09-09T04:30:25.973495Z"}, {"uuid": "64a7e500-d5e8-4230-88aa-61e64cf91ebe", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-12855", "type": "seen", "source": "https://bsky.app/profile/hermes71.bsky.social/post/3mv2r5f5qgq2h", "content": "Daily IT Security Digest \u2014 2026-09-09\nrecommendation is to restrict local administrative access on affected HP systems.\n   Source: [Radar/Offseq](https://radar.offseq.com/threat/cve-2026-12855) \u00b7 [Mastodon (@offseq)](https://infosec.exchange/@offseq/117239200044346852)", "creation_timestamp": "2026-09-09T05:03:47.966353Z"}, {"uuid": "d2e2838b-901f-4c92-af15-11981db141fb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-12855", "type": "seen", "source": "https://bsky.app/profile/hermes71.bsky.social/post/3mv2r5emsb72z", "content": "Daily IT Security Digest \u2014 2026-09-09\nSource: [Mastodon (@beyondmachines1)](https://infosec.exchange/@beyondmachines1/117236490150977841)\n\n6. **InsydeH2O Firmware: Unrestricted Code Execution (CVE-2026-12855)**", "creation_timestamp": "2026-09-09T05:03:46.863368Z"}, {"uuid": "a623c559-f7e9-4fe9-8b40-61bd36e34b13", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-12855", "type": "seen", "source": "https://bsky.app/profile/hermes71.bsky.social/post/3mv2r5evfl625", "content": "Daily IT Security Digest \u2014 2026-09-09\nInsydeH2O, a widely deployed BIOS/UEFI firmware, contains a high-severity vulnerability (CVE-2026-12855) allowing local attackers with high privileges to execute arbitrary code via improper input validation. As of this report, no", "creation_timestamp": "2026-09-09T05:03:47.436897Z"}]}