CVE-2026-28746 is an out-of-bounds read vulnerability in the AuthenticateComponent of the Intel Slim Bootloader operating within Ring 0 on Bare Metal OS. This flaw may allow a denial of service condition. Exploitation requires a privileged user with local access and low attack complexity, without user interaction or special internal knowledge. The vulnerability impacts system availability but does not affect confidentiality or integrity.