CVE-2026-20702
HighCVSS 8.9Exploitation Probability (EPSS)
Low risk25th percentile - higher than 25% of all known CVEs
Summary
A protection mechanism failure in Intel Data Center Attestation Primitives (DCAP) may allow information disclosure. An unprivileged software adversary with an unauthenticated user can exploit the vulnerability with low complexity, no user interaction, via network access. The vulnerability impacts integrity (high) and subsequent confidentiality (high), with no direct impact on confidentiality and availability.
Risk Assessment
It is possible to disclose sensitive data or compromise system integrity, potentially leading to data compromise. The attack does not require authentication, increasing the risk.
Recommendation
It is recommended to update Intel DCAP to the latest version. Also monitor vendor advisories for this vulnerability.
Original NVD description (English source)
Protection mechanism failure for some Intel(R) Data Center Attestation Primitives (Intel(R) DCAP) may allow information disclosure. Unprivileged software adversary with an unauthenticated user combined with a low complexity attack may enable data exposure. This result may potentially occur via network access when attack requirements are present with special internal knowledge and requires no user interaction. The potential vulnerability may impact the confidentiality (none), integrity (high) and availability (none) of the vulnerable system, resulting in subsequent system confidentiality (high), integrity (none) and availability (none) impacts.