CVE-2026-20702: High severity vulnerability
Protection mechanism failure for some Intel(R) Data Center Attestation Primitives (Intel(R) DCAP) may allow information disclosure. Unprivileged software adversary with an unauthenticated user combined with a low complexity attack may enable data exposure. This result may potentially occur via network access when attack requirements are present with special internal knowledge and requires no user interaction. The potential vulnerability may impact the confidentiality (none), integrity (high) and availability (none) of the vulnerable system, resulting in subsequent system confidentiality (high), integrity (none) and availability (none) impacts.
Event History
Frequently Asked Questions
What is the severity of CVE-2026-20702?
CVE-2026-20702 has a risk score of 56, indicating a moderate severity vulnerability.
What type of vulnerability is CVE-2026-20702?
CVE-2026-20702 is classified as a protection mechanism failure that may lead to information disclosure.
Who is affected by CVE-2026-20702?
CVE-2026-20702 affects systems utilizing Intel(R) Data Center Attestation Primitives (Intel(R) DCAP) that lack adequate protection mechanisms.
How can an attacker exploit CVE-2026-20702?
An unprivileged software adversary may exploit CVE-2026-20702 through unauthenticated access combined with a low complexity attack.
How do I mitigate the risks associated with CVE-2026-20702?
To mitigate CVE-2026-20702, it is essential to apply available security patches and updates provided by Intel.