CVE-2026-20898

Improper access control in N/a In Alias Checking Trusted Module For Some Intel(R) Xeon(R) Processors May Allow An Escalation Of Privilege. Startup Code And SMM Adversary With A Privileged User Combined With A High Complexity Attack May Enable Escalation Of Privilege. This Result May Potentially Occur Via Local Access When Attack Requirements Are Not Present Without Special Internal Knowledge And Requires No User Interaction. The Potential Vulnerability May Impact The Confidentiality (high), Integrity (high) And Availability (none) Of The Vulnerable System, Resulting In Subsequent System Confidentiality (high), Integrity (high) And Availability (none) Impacts.

CVSS score

8.5

EPSS probability

%0.1

Risk score

0.0

Published

2 mo ago

Overview Public Exploits (0)Newsroom Vulnerability Timeline

Patch status has not yet been verified

Resmî kaynaklarda yeterli kanıt bulunamadı. Bu sonuç “yama yok” anlamına gelmez.

Impact on My Inventory

Only the personal products you have added to your account are assessed; an organisation's inventory does not appear here.

Checking session…

Vulnerability description

DayBreach CVE AI Research

CVE-2026-20898 has vendor, distribution, patch and security-source records on file. We can compare them and prepare an explanation linked to the evidence.

Improper access control in the firmware for some in Alias Checking Trusted Module for some Intel(R) Xeon(R) processors may allow an escalation of privilege. Startup code and SMM adversary with a privileged user combined with a high complexity attack may enable escalation of privilege. This result may potentially occur via local access when attack requirements are not present without special internal knowledge and requires no user interaction. The potential vulnerability may impact the confidentiality (high), integrity (high) and availability (none) of the vulnerable system, resulting in subsequent system confidentiality (high), integrity (high) and availability (none) impacts.

IMPACT: Affected Products and Software

Affected Products

The following products are affected by CVE-2026-20898 vulnerability. Where our threat engine knows the exact affected versions, they are listed below.

ID	VENDOR	PRODUCT	ACTION
1	n/a	in Alias Checking Trusted Module for some Intel(R) Xeon(R) processors may allow an escalation of privilege. Startup code and SMM adversary with a privileged user combined with a high complexity attack may enable escalation of privilege. This result may potentially occur via local access when attack requirements are not present without special internal knowledge and requires no user interaction. The potential vulnerability may impact the confidentiality (high), integrity (high) and availability (none) of the vulnerable system, resulting in subsequent system confidentiality (high), integrity (high) and availability (none) impacts.	View
2	intel	xeon 6315p firmware	View
3	intel	xeon 6315p	View
4	intel	xeon 6325p firmware	View
5	intel	xeon 6325p	View
6	intel	xeon 6333p firmware	View
7	intel	xeon 6333p	View
8	intel	xeon 6337p firmware	View
9	intel	xeon 6337p	View
10	intel	xeon 6349p firmware	View
11	intel	xeon 6349p	View
12	intel	xeon 6353p firmware	View
13	intel	xeon 6353p	View
14	intel	xeon 6357p firmware	View
15	intel	xeon 6357p	View
16	intel	xeon 6369p firmware	View
17	intel	xeon 6369p	View
18	intel	xeon 6377p firmware	View
19	intel	xeon 6377p	View
20	intel	xeon 6503p firmware	View
21	intel	xeon 6503p	View
22	intel	xeon 6503p-b firmware	View
23	intel	xeon 6503p-b	View
24	intel	xeon 6505p firmware	View
25	intel	xeon 6505p	View
26	intel	xeon 6507p firmware	View
27	intel	xeon 6507p	View
28	intel	xeon 6511p firmware	View
29	intel	xeon 6511p	View
30	intel	xeon 6513p-b firmware	View
31	intel	xeon 6513p-b	View
32	intel	xeon 6515p firmware	View
33	intel	xeon 6515p	View
34	intel	xeon 6516p-b firmware	View
35	intel	xeon 6516p-b	View
36	intel	xeon 6517p firmware	View
37	intel	xeon 6517p	View
38	intel	xeon 6518p-b firmware	View
39	intel	xeon 6518p-b	View
40	intel	xeon 6520p firmware	View
41	intel	xeon 6520p	View
42	intel	xeon 6521p firmware	View
43	intel	xeon 6521p	View
44	intel	xeon 6523p-b firmware	View
45	intel	xeon 6523p-b	View
46	intel	xeon 6527p firmware	View
47	intel	xeon 6527p	View
48	intel	xeon 6530p firmware	View
49	intel	xeon 6530p	View
50	intel	xeon 6532p-b firmware	View
51	intel	xeon 6532p-b	View
52	intel	xeon 6533p-b firmware	View
53	intel	xeon 6533p-b	View
54	intel	xeon 6543p-b firmware	View
55	intel	xeon 6543p-b	View
56	intel	xeon 6544p-b firmware	View
57	intel	xeon 6544p-b	View
58	intel	xeon 6546p-b firmware	View
59	intel	xeon 6546p-b	View
60	intel	xeon 6548p-b firmware	View
61	intel	xeon 6548p-b	View
62	intel	xeon 6553p-b firmware	View
63	intel	xeon 6553p-b	View
64	intel	xeon 6556p-b firmware	View
65	intel	xeon 6556p-b	View
66	intel	xeon 6563p-b firmware	View
67	intel	xeon 6563p-b	View
68	intel	xeon 6706p-b firmware	View
69	intel	xeon 6706p-b	View
70	intel	xeon 6710e firmware	View
71	intel	xeon 6710e	View
72	intel	xeon 6714p firmware	View
73	intel	xeon 6714p	View
74	intel	xeon 6716p-b firmware	View
75	intel	xeon 6716p-b	View
76	intel	xeon 6718p-b firmware	View
77	intel	xeon 6718p-b	View
78	intel	xeon 6724p firmware	View
79	intel	xeon 6724p	View
80	intel	xeon 6725p firmware	View
81	intel	xeon 6725p	View
82	intel	xeon 6726p-b firmware	View
83	intel	xeon 6726p-b	View
84	intel	xeon 6728p firmware	View
85	intel	xeon 6728p	View
86	intel	xeon 6730p firmware	View
87	intel	xeon 6730p	View
88	intel	xeon 6731e firmware	View
89	intel	xeon 6731e	View
90	intel	xeon 6731p firmware	View
91	intel	xeon 6731p	View
92	intel	xeon silver 4410t firmware	View
93	intel	xeon silver 4410t	View
94	intel	xeon silver 4410tm firmware	View
95	intel	xeon silver 4410tm	View
96	intel	xeon silver 4410y firmware	View
97	intel	xeon silver 4410y	View
98	intel	xeon silver 4416 firmware	View
99	intel	xeon silver 4416	View
100	intel	xeon silver 4509y firmware	View
101	intel	xeon silver 4509y	View
102	intel	xeon silver 4510 firmware	View
103	intel	xeon silver 4510	View
104	intel	xeon silver 4510t firmware	View
105	intel	xeon silver 4510t	View
106	intel	xeon silver 4514y firmware	View
107	intel	xeon silver 4514y	View
108	intel	xeon silver 4516y+ firmware	View
109	intel	xeon silver 4516y+	View
110	intel	xeon 6732p firmware	View
111	intel	xeon 6732p	View
112	intel	xeon 6736p firmware	View
113	intel	xeon 6736p	View
114	intel	xeon 6737p firmware	View
115	intel	xeon 6737p	View
116	intel	xeon 6738p firmware	View
117	intel	xeon 6738p	View
118	intel	xeon 6740e firmware	View
119	intel	xeon 6740e	View
120	intel	xeon 6740p firmware	View
121	intel	xeon 6740p	View
122	intel	xeon 6741p firmware	View
123	intel	xeon 6741p	View
124	intel	xeon 6745p firmware	View
125	intel	xeon 6745p	View
126	intel	xeon 6746e firmware	View
127	intel	xeon 6746e	View
128	intel	xeon 6747p firmware	View
129	intel	xeon 6747p	View
130	intel	xeon 6748p firmware	View
131	intel	xeon 6748p	View
132	intel	xeon 6756e firmware	View
133	intel	xeon 6756e	View
134	intel	xeon 6756p-b firmware	View
135	intel	xeon 6756p-b	View
136	intel	xeon 6760p firmware	View
137	intel	xeon 6760p	View
138	intel	xeon 6761p firmware	View
139	intel	xeon 6761p	View
140	intel	xeon 6766e firmware	View
141	intel	xeon 6766e	View
142	intel	xeon 6766p-b firmware	View
143	intel	xeon 6766p-b	View
144	intel	xeon 6767p firmware	View
145	intel	xeon 6767p	View
146	intel	xeon 6768p firmware	View
147	intel	xeon 6768p	View
148	intel	xeon 6768p-b firmware	View
149	intel	xeon 6768p-b	View
150	intel	xeon 6774p firmware	View
151	intel	xeon 6774p	View
152	intel	xeon 6776p firmware	View
153	intel	xeon 6776p	View
154	intel	xeon 6776p-b firmware	View
155	intel	xeon 6776p-b	View
156	intel	xeon 6780e firmware	View
157	intel	xeon 6780e	View
158	intel	xeon 6781p firmware	View
159	intel	xeon 6781p	View
160	intel	xeon 6787p firmware	View
161	intel	xeon 6787p	View
162	intel	xeon 6788p firmware	View
163	intel	xeon 6788p	View
164	intel	xeon 6944p firmware	View
165	intel	xeon 6944p	View
166	intel	xeon 6952p firmware	View
167	intel	xeon 6952p	View
168	intel	xeon 6960p firmware	View
169	intel	xeon 6960p	View
170	intel	xeon 6962p firmware	View
171	intel	xeon 6962p	View
172	intel	xeon 6972p firmware	View
173	intel	xeon 6972p	View
174	intel	xeon 6978p firmware	View
175	intel	xeon 6978p	View
176	intel	xeon 6979p firmware	View
177	intel	xeon 6979p	View
178	intel	xeon 6980p firmware	View
179	intel	xeon 6980p	View
180	intel	xeon bronze 3408u firmware	View
181	intel	xeon bronze 3408u	View
182	intel	xeon bronze 3508u firmware	View
183	intel	xeon bronze 3508u	View
184	intel	xeon gold 5403n firmware	View
185	intel	xeon gold 5403n	View
186	intel	xeon gold 5411n firmware	View
187	intel	xeon gold 5411n	View
188	intel	xeon gold 5412u firmware	View
189	intel	xeon gold 5412u	View
190	intel	xeon gold 5415 firmware	View
191	intel	xeon gold 5415	View
192	intel	xeon gold 5416s firmware	View
193	intel	xeon gold 5416s	View
194	intel	xeon gold 5418n firmware	View
195	intel	xeon gold 5418n	View
196	intel	xeon gold 5418y firmware	View
197	intel	xeon gold 5418y	View
198	intel	xeon gold 5420 firmware	View
199	intel	xeon gold 5420	View
200	intel	xeon gold 5423n firmware	View

Total affected vendors: 2|Products: 200

RED HAT CSAF/VEX: Product Impact Check

Red Hat has not yet published a CSAF/VEX impact record for this CVE. This does not mean “not affected”.

SCORING: CVSS from Multiple Sources

CVSS Scores

The Common Vulnerability Scoring System is a standardised framework for assessing the severity of vulnerabilities in software and systems. We collect and display CVSS scores from several sources for each CVE.

SCORE	VERSION	SEVERITY	VECTOR	SOURCE
8.5	CVSS V4_0	HIGH	CVSS:4.0/AV:L/AC:H/AT:N/PR:H/UI:N/VC:H/VI:H/VA:N/SC:H/SI:H/SA:N	CVE CNA
8.5	CVSS V40	HIGH	CVSS:4.0/AV:L/AC:H/AT:N/PR:H/UI:N/VC:H/VI:H/VA:N/SC:H/SI:H/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X	NVD
7.2	CVSS V31	HIGH	CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:N	NVD

Patch and Remediation Guide

Solution & Remediation Advisory

Patch status unknown

İncelenen resmî kaynaklarda yama durumu doğrulanamadı. Bu sonuç “yama yok” anlamına gelmez.

Confirm the affected product and version against the source evidence above.

Restrict access to internet-facing services and apply network segmentation.

Until a patch is confirmed, follow the vendor advisory; do not read an unknown status as “no patch”.

Monitor server logs and network endpoints for signs of anomalous execution.

Public exploit and active exploitation status

Verified exploit intelligence

No verified public PoC, exploit repository or Metasploit module has been found for this CVE yet.

Weakness Classification and Attack Patterns (CWE & CAPEC)

CWE - Common Weakness Enumeration

While CVE identifies specific instances of vulnerabilities, CWE categorises the common flaws or weaknesses that can lead to vulnerabilities. CVE-2026-20898 is associated with the following CWEs:

CWE-284: Common Weakness Enumeration Entry CWE-284

Common Attack Pattern Enumeration and Classification (CAPEC)

Common Attack Pattern Enumeration and Classification (CAPEC) stores attack patterns, which are descriptions of the common attributes and approaches employed by adversaries to exploit the CVE-2026-20898 weaknesses.

CAPEC-66: SQL Injection CAPEC-126: Path Traversal CAPEC-28: OS Command Injection

Attack Vector and Accessibility

ExposureYerel erişim

PermissionsHigh

UserGerekmiyor

Official Sources and Advisories

https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01439.htmlvendor-advisory

CVSS Vector Radar Chart

8.5 / 10

Vulnerability Scoring Details

CVSS:4.0/AV:L/AC:H/AT:N/PR:H/UI:N/VC:H/VI:H/VA:N/SC:H/SI:H/SA:N

Attack VectorLocal

Attack ComplexityHigh

Privileges RequiredHigh privileges

User InteractionNone required

Confidentiality (Gizlilik)High

Integrity (Bütünlük)None

Availability (Erişilebilirlik)None

Yama durumu bilinmiyor

İncelenen resmî kaynaklarda yama durumu doğrulanamadı. Bu sonuç “yama yok” anlamına gelmez.

Follow the vendor

n/a

intel

Weakness Type (CWE & CAPEC)

CWE-284

Similar Vulnerabilities

10.0

CVE-2021-44228 Actively exploitedImproper input validation in Apache Log4j

Vendorsiemens Product6bk1602-0aa12-0tp0 firmware+16 etkilenen

Patch verified Public Exploits:22EPSS %1004 y ago

10.0

CVE-2015-3306 Actively exploitedImproper access control in N/a

Vendorn/a Productn/a+10 etkilenen

Workaround Public Exploits:5EPSS %9911 y ago

9.8

CVE-2021-21985 Actively exploitedVulnerability in N/a VMware vCenter Server And VMware Cloud Foundation

Vendorn/a ProductVMware vCenter Server and VMware Cloud Foundation+3 etkilenen

Workaround Public Exploits:10EPSS %1005 y ago

9.8

CVE-2019-19781 Actively exploitedVulnerability in N/a

Vendorn/a Productn/a+7 etkilenen

Workaround Public Exploits:13EPSS %1006 y ago

9.8

CVE-2021-21972 Actively exploitedVulnerability in N/a VMware vCenter Server

Vendorn/a ProductVMware vCenter Server+4 etkilenen

Workaround Public Exploits:11EPSS %1005 y ago

9.8

CVE-2019-15107 Actively exploitedVulnerability in N/a

Vendorn/a Productn/a+2 etkilenen

Workaround Public Exploits:13EPSS %1007 y ago

Get this vulnerability through the API

Affected products, version ranges, exploitation status and patch information in a single request, with a free key.

Get a free key Documentation

curl -H "x-api-key: $DAYBREACH_API_KEY" \
  "https://api.daybreach.dev/api/v1/intel/cves/CVE-2026-20898"