← All Advisories
Reported from OT-Advisories.com as of

CVE-2026-20702

Last refreshed2026-11-02

Status: UPDATED  |  Advisory ID: CVE-2026-20702

Key Details

CVECVE-2026-20702
CVSS Score / Version
10.0 (Critical) / CVSS v3.1
Updated2026-11-02
CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:N
CVSS Prose
attack vector is network; attack complexity is low; privileges required is none; user interaction is none; scope is changed; confidentiality impact is high; integrity impact is high; availability impact is none.
Affected products
Intel data_center_attestation_primitives
Classified as
CWE-693 (Protection Mechanism Failure)

Affected Products, Subsystems & Sectors

VendorProductAffected VersionsPatch Status
Inteldata_center_attestation_primitives
SubsystemsGeneral OT
SectorsMultiple

What to Know

Protection mechanism failure for some Intel(R) Data Center Attestation Primitives (Intel(R) DCAP) may allow information disclosure. Unprivileged software adversary with an unauthenticated user combined with a low complexity attack may enable data exposure. This result may potentially occur via network access when attack requirements are present with special internal knowledge and requires no user interaction. The potential vulnerability may impact the confidentiality (none), integrity (high) and availability (none) of the vulnerable system, resulting in subsequent system confidentiality (high), integrity (none) and availability (none) impacts. (NVD)

What to Do

Monitor Intel's web page for any future patch releases. See vendor advisory link below.

References

SourceReference
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2026-20702
CVEhttps://www.cve.org/CVERecord?id=CVE-2026-20702
Vendor advisoryhttps://intel.com/content/www/us/en/security-center/advisory/intel-sa-01449.html

About

OT-Advisories  ·  CVE  ·  NVD  ·  CVSS  ·  KEV  ·  EPSS  ·  CWE
Report compilation © 2026 OT-Advisories.com  ·  CC BY 4.0  ·  Source materials remain the property of their respective publishers as cited.