What’s Vulnerable › Vulnerabilities

CVE-2026-20901

• Severity: medium (CVSS 5.3 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.1% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2026-08-11 · updated 2026-08-28
• Weakness: CWE-20

Description

Improper input validation for some Intel(R) Xeon(R) processors within firmware may allow an escalation of privilege. Startup code and smm adversary with a privileged user combined with a high complexity attack may enable data alteration. This result may potentially occur via local access when attack requirements are present without special internal knowledge and requires no user interaction. The potential vulnerability may impact the confidentiality (none), integrity (none) and availability (none) of the vulnerable system, resulting in subsequent system confidentiality (none), integrity (high) and availability (none) impacts.

Affected products

• Intel Xeon Bronze 3408U: all versions
• Intel Xeon Bronze 3408U Firmware: all versions
• Intel Xeon Bronze 3508U Firmware: all versions
• Intel Xeon Gold 5403N Firmware: all versions
• Intel Xeon Gold 5411N: all versions
• Intel Xeon Gold 5411N Firmware: all versions
• Intel Xeon Gold 5412U: all versions
• Intel Xeon Gold 5412U Firmware: all versions
• Intel Xeon Gold 5415: all versions
• Intel Xeon Gold 5415+ Firmware: all versions
• Intel Xeon Gold 5415 Firmware: all versions
• Intel Xeon Gold 5416S: all versions
• Intel Xeon Gold 5416S Firmware: all versions
• Intel Xeon Gold 5418N: all versions
• Intel Xeon Gold 5418N Firmware: all versions
• Intel Xeon Gold 5418Y: all versions
• Intel Xeon Gold 5418Y Firmware: all versions
• Intel Xeon Gold 5420: all versions
• Intel Xeon Gold 5420+ Firmware: all versions
• Intel Xeon Gold 5420 Firmware: all versions
• Intel Xeon Gold 5423N Firmware: all versions
• Intel Xeon Gold 5433N Firmware: all versions
• Intel Xeon Gold 5512U Firmware: all versions
• Intel Xeon Gold 5515+ Firmware: all versions
• Intel Xeon Gold 5520+ Firmware: all versions
• Intel Xeon Gold 6403N Firmware: all versions
• Intel Xeon Gold 6414U: all versions
• Intel Xeon Gold 6414U Firmware: all versions
• Intel Xeon Gold 6416H: all versions
• Intel Xeon Gold 6416H Firmware: all versions

References

• https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01442.html

Get alerted when CVE-2026-20901 or the next vulnerability affects your stack