Back to the CVE list
CVE-2026-20901

Improper input validation in N/a Intel(R) Xeon(R) Processors

CVSS score

4.0

EPSS probability

%0.1

Risk score

0.0

Published

2 mo ago

OverviewPublic Exploits (0)NewsroomVulnerability Timeline
Patch status has not yet been verified

Resmî kaynaklarda yeterli kanıt bulunamadı. Bu sonuç “yama yok” anlamına gelmez.

Impact on My Inventory

Only the personal products you have added to your account are assessed; an organisation's inventory does not appear here.

Checking session…

Vulnerability description

DayBreach CVE AI Research

CVE-2026-20901 has vendor, distribution, patch and security-source records on file. We can compare them and prepare an explanation linked to the evidence.

Improper input validation for some Intel(R) Xeon(R) processors within firmware may allow an escalation of privilege. Startup code and smm adversary with a privileged user combined with a high complexity attack may enable data alteration. This result may potentially occur via local access when attack requirements are present without special internal knowledge and requires no user interaction. The potential vulnerability may impact the confidentiality (none), integrity (none) and availability (none) of the vulnerable system, resulting in subsequent system confidentiality (none), integrity (high) and availability (none) impacts.

IMPACT: Affected Products and Software

Affected Products

The following products are affected by CVE-2026-20901 vulnerability. Where our threat engine knows the exact affected versions, they are listed below.

IDVENDORPRODUCTACTION
1n/aIntel(R) Xeon(R) processors View
2intelxeon bronze 3408u firmware View
3intelxeon bronze 3408u View
4intelxeon gold 5403n firmware View
5intelxeon gold 5403n View
6intelxeon gold 5411n firmware View
7intelxeon gold 5411n View
8intelxeon gold 5412u firmware View
9intelxeon gold 5412u View
10intelxeon gold 5415 firmware View
11intelxeon gold 5415 View
12intelxeon platinum 8592+ firmware View
13intelxeon platinum 8592+ View
14intelxeon platinum 8592v firmware View
15intelxeon platinum 8592v View
16intelxeon platinum 8593q firmware View
17intelxeon platinum 8593q View
18intelxeon silver 4509y firmware View
19intelxeon silver 4509y View
20intelxeon silver 4510 firmware View
21intelxeon silver 4510 View
22intelxeon silver 4510t firmware View
23intelxeon silver 4510t View
24intelxeon silver 4514y firmware View
25intelxeon silver 4514y View
26intelxeon silver 4516y+ firmware View
27intelxeon silver 4516y+ View
28intelxeon gold 5416s firmware View
29intelxeon gold 5416s View
30intelxeon gold 5418n firmware View
31intelxeon gold 5418n View
32intelxeon gold 5418y firmware View
33intelxeon gold 5418y View
34intelxeon gold 5420 firmware View
35intelxeon gold 5420 View
36intelxeon gold 5423n firmware View
37intelxeon gold 5423n View
38intelxeon gold 5433n firmware View
39intelxeon gold 5433n View
40intelxeon gold 6403n firmware View
41intelxeon gold 6403n View
42intelxeon gold 6414u firmware View
43intelxeon gold 6414u View
44intelxeon gold 6416h firmware View
45intelxeon gold 6416h View
46intelxeon gold 6418h firmware View
47intelxeon gold 6418h View
48intelxeon gold 6421n firmware View
49intelxeon gold 6421n View
50intelxeon gold 6423n firmware View
51intelxeon gold 6423n View
52intelxeon gold 6426y firmware View
53intelxeon gold 6426y View
54intelxeon gold 6428n firmware View
55intelxeon gold 6428n View
56intelxeon gold 6430 firmware View
57intelxeon gold 6430 View
58intelxeon gold 6433n firmware View
59intelxeon gold 6433n View
60intelxeon gold 6433ne firmware View
61intelxeon gold 6433ne View
62intelxeon gold 6434 firmware View
63intelxeon gold 6434 View
64intelxeon gold 6434h firmware View
65intelxeon gold 6434h View
66intelxeon gold 6438m firmware View
67intelxeon gold 6438m View
68intelxeon gold 6438n firmware View
69intelxeon gold 6438n View
70intelxeon gold 6438y firmware View
71intelxeon gold 6438y View
72intelxeon gold 6442y firmware View
73intelxeon gold 6442y View
74intelxeon gold 6443n firmware View
75intelxeon gold 6443n View
76intelxeon gold 6444y firmware View
77intelxeon gold 6444y View
78intelxeon gold 6448h firmware View
79intelxeon gold 6448h View
80intelxeon gold 6448y firmware View
81intelxeon gold 6448y View
82intelxeon gold 6454s firmware View
83intelxeon gold 6454s View
84intelxeon gold 6458q firmware View
85intelxeon gold 6458q View
86intelxeon platinum 8444h firmware View
87intelxeon platinum 8444h View
88intelxeon platinum 8450h firmware View
89intelxeon platinum 8450h View
90intelxeon platinum 8452y firmware View
91intelxeon platinum 8452y View
92intelxeon platinum 8454h firmware View
93intelxeon platinum 8454h View
94intelxeon platinum 8458p firmware View
95intelxeon platinum 8458p View
96intelxeon platinum 8460h firmware View
97intelxeon platinum 8460h View
98intelxeon platinum 8460y firmware View
99intelxeon platinum 8460y View
100intelxeon platinum 8461v firmware View
101intelxeon platinum 8461v View
102intelxeon platinum 8462y firmware View
103intelxeon platinum 8462y View
104intelxeon platinum 8468 firmware View
105intelxeon platinum 8468 View
106intelxeon platinum 8468h firmware View
107intelxeon platinum 8468h View
108intelxeon platinum 8468v firmware View
109intelxeon platinum 8468v View
110intelxeon platinum 8470 firmware View
111intelxeon platinum 8470 View
112intelxeon platinum 8470n firmware View
113intelxeon platinum 8470n View
114intelxeon platinum 8470q firmware View
115intelxeon platinum 8470q View
116intelxeon platinum 8471n firmware View
117intelxeon platinum 8471n View
118intelxeon platinum 8480 firmware View
119intelxeon platinum 8480 View
120intelxeon platinum 8490h firmware View
121intelxeon platinum 8490h View
122intelxeon silver 4410t firmware View
123intelxeon silver 4410t View
124intelxeon silver 4410y firmware View
125intelxeon silver 4410y View
126intelxeon silver 4416 firmware View
127intelxeon silver 4416 View
128intelxeon bronze 3508u firmware View
129intelxeon bronze 3508u View
130intelxeon gold 5512u firmware View
131intelxeon gold 5512u View
132intelxeon gold 5515+ firmware View
133intelxeon gold 5515+ View
134intelxeon gold 5520+ firmware View
135intelxeon gold 5520+ View
136intelxeon gold 6526y firmware View
137intelxeon gold 6526y View
138intelxeon gold 6530 firmware View
139intelxeon gold 6530 View
140intelxeon gold 6534 firmware View
141intelxeon gold 6534 View
142intelxeon gold 6538n firmware View
143intelxeon gold 6538n View
144intelxeon gold 6538y+ firmware View
145intelxeon gold 6538y+ View
146intelxeon gold 6542y firmware View
147intelxeon gold 6542y View
148intelxeon gold 6544y firmware View
149intelxeon gold 6544y View
150intelxeon gold 6548n firmware View
151intelxeon gold 6548n View
152intelxeon gold 6548y+ firmware View
153intelxeon gold 6548y+ View
154intelxeon gold 6554s firmware View
155intelxeon gold 6554s View
156intelxeon gold 6558q firmware View
157intelxeon gold 6558q View
158intelxeon platinum 8558 firmware View
159intelxeon platinum 8558 View
160intelxeon platinum 8558p firmware View
161intelxeon platinum 8558p View
162intelxeon platinum 8558u firmware View
163intelxeon platinum 8558u View
164intelxeon platinum 8562y+ firmware View
165intelxeon platinum 8562y+ View
166intelxeon platinum 8568y+ firmware View
167intelxeon platinum 8568y+ View
168intelxeon platinum 8570 firmware View
169intelxeon platinum 8570 View
170intelxeon platinum 8571n firmware View
171intelxeon platinum 8571n View
172intelxeon platinum 8580 firmware View
173intelxeon platinum 8580 View
174intelxeon platinum 8581v firmware View
175intelxeon platinum 8581v View
176debianintel-microcode (sid) View
177debianintel-microcode (forky) View
178debianintel-microcode (trixie) View
179debianintel-microcode (bookworm) View
180debianintel-microcode (bullseye) View
Total affected vendors: 3|Products: 180

RED HAT CSAF/VEX: Product Impact Check

Red Hat has not yet published a CSAF/VEX impact record for this CVE. This does not mean “not affected”.

SCORING: CVSS from Multiple Sources

CVSS Scores

The Common Vulnerability Scoring System is a standardised framework for assessing the severity of vulnerabilities in software and systems. We collect and display CVSS scores from several sources for each CVE.

SCOREVERSIONSEVERITYVECTORSOURCE
5.3CVSS V31MEDIUMCVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:N/I:H/A:NNVD
4.0CVSS V4_0MEDIUMCVSS:4.0/AV:L/AC:H/AT:P/PR:H/UI:N/VC:N/VI:N/VA:N/SC:N/SI:H/SA:NCVE CNA
4.0CVSS V40MEDIUMCVSS:4.0/AV:L/AC:H/AT:P/PR:H/UI:N/VC:N/VI:N/VA:N/SC:N/SI:H/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:XNVD

Patch and Remediation Guide

Solution & Remediation Advisory

Patch status unknown

İncelenen resmî kaynaklarda yama durumu doğrulanamadı. Bu sonuç “yama yok” anlamına gelmez.

Confirm the affected product and version against the source evidence above.
Restrict access to internet-facing services and apply network segmentation.
Until a patch is confirmed, follow the vendor advisory; do not read an unknown status as “no patch”.
Monitor server logs and network endpoints for signs of anomalous execution.

Public exploit and active exploitation status

Verified exploit intelligence

No verified public PoC, exploit repository or Metasploit module has been found for this CVE yet.

Weakness Classification and Attack Patterns (CWE & CAPEC)

CWE - Common Weakness Enumeration

While CVE identifies specific instances of vulnerabilities, CWE categorises the common flaws or weaknesses that can lead to vulnerabilities. CVE-2026-20901 is associated with the following CWEs:

CWE-20: Improper Input Validation

Common Attack Pattern Enumeration and Classification (CAPEC)

Common Attack Pattern Enumeration and Classification (CAPEC) stores attack patterns, which are descriptions of the common attributes and approaches employed by adversaries to exploit the CVE-2026-20901 weaknesses.

CAPEC-66: SQL InjectionCAPEC-126: Path TraversalCAPEC-28: OS Command Injection

Attack Vector and Accessibility

ExposureYerel erişim
PermissionsHigh
UserGerekmiyor

Official Sources and Advisories

https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01442.htmlvendor-advisoryhttps://security-tracker.debian.org/tracker/CVE-2026-20901vendor-advisory

CVSS Vector Radar Chart

4.0 / 10
Attack VectorLocalComplexityHighPrivilegesHighUser Interact.NoneConfidentialityHighIntegrityNoneAvailabilityNone

Vulnerability Scoring Details

CVSS:4.0/AV:L/AC:H/AT:P/PR:H/UI:N/VC:N/VI:N/VA:N/SC:N/SI:H/SA:N
Attack VectorLocal
Attack ComplexityHigh
Privileges RequiredHigh privileges
User InteractionNone required
Confidentiality (Gizlilik)High
Integrity (Bütünlük)None
Availability (Erişilebilirlik)None

Yama durumu bilinmiyor

İncelenen resmî kaynaklarda yama durumu doğrulanamadı. Bu sonuç “yama yok” anlamına gelmez.

Follow the vendor

N
n/a logo
n/a
I
intel logo
intel
D
debian logo
debian

Weakness Type (CWE & CAPEC)

CWE-20

Similar Vulnerabilities

Get this vulnerability through the API

Affected products, version ranges, exploitation status and patch information in a single request, with a free key.

Get a free keyDocumentation
curl -H "x-api-key: $DAYBREACH_API_KEY" \
  "https://api.daybreach.dev/api/v1/intel/cves/CVE-2026-20901"