wikiAMD Safety Vulnerabilities - August 2026
On August 11th, 2026, AMD published security bulletins with safety vulnerabilities. AMD-SB-3033[1] and AMD-SB-7064[2] can be resolved with firmware updates.
Affected systems
- Systems with AMD Ryzen Threadripper PRO 3000WX processors
- Systems with AMD Ryzen Threadripper PRO 5000WX processors
- Systems with AMD Ryzen Threadripper 7000 / PRO 7000WX processors
AMD EPYC systems:
- Systems with "Zen 4" AMD EPYC 4004 Raphael processors
- Systems with "Zen 5" AMD EPYC 4005 Grado processors
- Systems with "Zen 3" AMD EPYC 7003 Milan processors
- Systems with "Zen 4" AMD EPYC 9004 Genoa and Bergamo & 8004 Siena processors
- Systems with "Zen 5" AMD EPYC 9005 Turin processors
Problem solution
Here is a tabular list of the corresponding CVEs and corrective measures for the respective generation, if available.
AMD EPYC 4004 Raphael / 4005 Grado
| Safety Vulnerability | Risk potential: | Platform Initialization Version |
|---|---|---|
| CVE-2026-6726 | 8.5 (high) | ComboAM5PI 1.2.0.3k (2026-05-31) |
| CVE-2026-6727 | 8.3 (high) | ComboAM5PI 1.2.0.3k (2026-05-31) |
AMD EPYC 7003 Milan
| Safety vulnerability | Platform Initialization Version |
|---|---|
| AMD-SB-3033 | MilanPI 1.0.0.J (2025-12-02) |
AMD EPYC 9004 Genoa / Bergamo & EPYC 8004 Siena:
| Safety vulnerability | Platform Initialization Version |
|---|---|
| AMD-SB-3033 | GenoaPI 1.0.0.H (2025-12-02) |
AMD EPYC 9005 Turin / Turin Dense
| Safety vulnerability | Platform Initialization Version |
|---|---|
| AMD-SB-3033 | Turin PI-SP5 1.0.0.8 (2025-11-10) |
AMD Ryzen Threadripper PRO 3000WX
| Safety vulnerability | Risk potential: | Platform Initialization Version |
|---|---|---|
| CVE-2026-6726 | 8.5 (high) | ChagallWSPI-sWRX8 1.0.0.f (2026-05-17)
CastlePeakWSPI-sWRX8 1.0.0.J (2026-05-17) |
| CVE-2026-6727 | 8.3 (high) | ChagallWSPI-sWRX8 1.0.0.f (2026-05-17)
CastlePeakWSPI-sWRX8 1.0.0.J (2026-05-17) |
AMD Ryzen Threadripper PRO 5000WX
| Safety vulnerability | Risk potential: | Platform Initialization Version |
|---|---|---|
| CVE-2026-6726 | 8.5 (high) | ChagallWSPI-sWRX8 1.0.0.f (2026-05-17) |
| CVE-2026-6727 | 8.3 (high) | ChagallWSPI-sWRX8 1.0.0.f (2026-05-17) |
AMD Ryzen Threadripper 7000 / PRO 7000WX
| Safety vulnerability | Risk potential: | Platform Initialization Version |
|---|---|---|
| CVE-2026-6726 | 8.5 (high) | StormPeakPI-SP6_1.1.0.0l (2026-05-11)
StormPeakPI-SP6_1.0.0.1n (2026-05-11) |
| CVE-2026-6727 | 8.3 (high) | StormPeakPI-SP6_1.1.0.0l (2026-05-11)
StormPeakPI-SP6_1.0.0.1n (2026-05-11) |
Supermicro Security Bulletins for the safety vulnerabilities have already been published. A list with BIOS-versions of the respective mainboards, to close the gaps, is also available. In the following, there is an excerpt from this table, in which all mainboards, that are offered by Thomas-Krenn, are listed: [3]
| AMD motherboard | BIOS version |
|---|---|
| H12SSW-iN/NT | 3.6 |
| H12SSL-i/C/CT/NT | 3.6 |
| H12DSi-N6/NT6 | 3.6 |
| H13SSW | 3.8 |
| H13SSL-N/NC | 3.8 |
Updates for Thomas-Krenn products
Updates for respective system can be found in the Thomas-Krenn download area. The versions in the download area have been tested by us to guarantee the stability and compatibility of our systems.
If you require the latest version for your system and it is not yet available in our download area, you can get it at Asus or Supermicro.
Sources
- The Security Coprocessor is unsafe in many CPUs (heise.de, August 2026)
- Two vulnerabilities bypass TPM protection (golem.de, August 2026)
References
- ↑ SEV Firmware Arbitrary Code Execution (www.amd.com/en/resources/product-security)
- ↑ Trusted Platform Module (TPM) Reference Code Errata (www.amd.com/en/resources/product-security)
- ↑ Supermicro Security Center (www.supermicro.com)
 |
Author: Thomas-Krenn.AG At Thomas-Krenn.AG we pay attention to the best possible service. To do justice to this, we have created our Thomas-Krenn Wiki. Here we share our knowledge with you and inform you about basics and news from the IT world. You like our knowledge culture and want to become part of the team? Visit our job offers.
|
 |
Translator: Alina Ranzinger Alina has been working at Thomas-Krenn.AG since 2024. After her training as multilingual business assistant, she got her job as assistant of the Product Management and is responsible for the translation of texts and for the organisation of the department.
|
