What’s Vulnerable › Vulnerabilities

CVE-2020-26200

• Severity: medium (CVSS 6.8 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.3% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2021-02-26 · updated 2026-06-17
• Weakness: CWE-287

Description

A component of Kaspersky custom boot loader allowed loading of untrusted UEFI modules due to insufficient check of their authenticity. This component is incorporated in Kaspersky Rescue Disk (KRD) and was trusted by the Authentication Agent of Full Disk Encryption in Kaspersky Endpoint Security (KES). This issue allowed to bypass the UEFI Secure Boot security feature. An attacker would need physical access to the computer to exploit it. Otherwise, local administrator privileges would be required to modify the boot loader component.

Affected products

• Kaspersky Endpoint Security for Windows: 10-sp2_mr2, 10-sp2_mr3, 11.0.0, 11.0.1, 11.1.0
• Kaspersky Rescue Disk: before 18.0.11.3 — fixed in 18.0.11.3

How to fix

Upgrade to a fixed version: Kaspersky Rescue Disk 18.0.11.3. Check the vendor advisory for mitigations.

References

• https://support.kaspersky.com/general/vulnerability.aspx?el=12430#170221
• https://github.com/CVEProject/cvelist/blob/master/2020/26xxx/CVE-2020-26200.json
• https://support.kaspersky.com/general/vulnerability.aspx?el=12430#170221

Get alerted when CVE-2020-26200 or the next vulnerability affects your stack