CVE-2026-20708
MediumCVSS 5.9Exploitation Probability (EPSS)
Low risk16th percentile - higher than 16% of all known CVEs
Summary
Insertion of sensitive information into log file in Intel AMT and Intel Standard Manageability subsystem may allow information disclosure. A privileged attacker with a high complexity attack can access data via network, without user interaction.
Risk Assessment
Risk of exposure of sensitive data, potentially compromising system confidentiality.
Recommendation
Update Intel AMT and Intel Standard Manageability software to the latest version with security fixes.
Original NVD description (English source)
Insertion of sensitive information into log file in the subsystem for the Intel(R) AMT and Intel(R) Standard Manageability may allow an information disclosure. Network adversary with a privileged user combined with a high complexity attack may enable data exposure. This result may potentially occur via network access when attack requirements are not present without special internal knowledge and requires no user interaction. The potential vulnerability may impact the confidentiality (high), integrity (none) and availability (none) of the vulnerable system, resulting in subsequent system confidentiality (none), integrity (none) and availability (none) impacts.