Vulnerability Details CVE-2026-20901
Improper input validation for some Intel(R) Xeon(R) processors within firmware may allow an escalation of privilege. Startup code and smm adversary with a privileged user combined with a high complexity attack may enable data alteration. This result may potentially occur via local access when attack requirements are present without special internal knowledge and requires no user interaction. The potential vulnerability may impact the confidentiality (none), integrity (none) and availability (none) of the vulnerable system, resulting in subsequent system confidentiality (none), integrity (high) and availability (none) impacts.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.001
EPSS Ranking 0.8%
CVSS Severity
CVSS v3 Score 5.3
Products affected by CVE-2026-20901
-
cpe:2.3:h:intel:xeon_bronze_3408u:-
-
cpe:2.3:h:intel:xeon_bronze_3508u:-
-
cpe:2.3:h:intel:xeon_gold_5403n:-
-
cpe:2.3:h:intel:xeon_gold_5411n:-
-
cpe:2.3:h:intel:xeon_gold_5412u:-
-
cpe:2.3:h:intel:xeon_gold_5415+:-
-
cpe:2.3:h:intel:xeon_gold_5415:-
-
cpe:2.3:h:intel:xeon_gold_5416s:-
-
cpe:2.3:h:intel:xeon_gold_5418n:-
-
cpe:2.3:h:intel:xeon_gold_5418y:-
-
cpe:2.3:h:intel:xeon_gold_5420+:-
-
cpe:2.3:h:intel:xeon_gold_5420:-
-
cpe:2.3:h:intel:xeon_gold_5423n:-
-
cpe:2.3:h:intel:xeon_gold_5433n:-
-
cpe:2.3:h:intel:xeon_gold_5512u:-
-
cpe:2.3:h:intel:xeon_gold_5515+:-
-
cpe:2.3:h:intel:xeon_gold_5520+:-
-
cpe:2.3:h:intel:xeon_gold_6403n:-
-
cpe:2.3:h:intel:xeon_gold_6414u:-
-
cpe:2.3:h:intel:xeon_gold_6416h:-
-
cpe:2.3:h:intel:xeon_gold_6418h:-
-
cpe:2.3:h:intel:xeon_gold_6421n:-
-
cpe:2.3:h:intel:xeon_gold_6423n:-
-
cpe:2.3:h:intel:xeon_gold_6426y:-
-
cpe:2.3:h:intel:xeon_gold_6428n:-
-
cpe:2.3:h:intel:xeon_gold_6430:-
-
cpe:2.3:h:intel:xeon_gold_6433n:-
-
cpe:2.3:h:intel:xeon_gold_6433ne:-
-
cpe:2.3:h:intel:xeon_gold_6434:-
-
cpe:2.3:h:intel:xeon_gold_6434h:-
-
cpe:2.3:h:intel:xeon_gold_6438m:-
-
cpe:2.3:h:intel:xeon_gold_6438n:-
-
cpe:2.3:h:intel:xeon_gold_6438y+:-
-
cpe:2.3:h:intel:xeon_gold_6438y:-
-
cpe:2.3:h:intel:xeon_gold_6442y:-
-
cpe:2.3:h:intel:xeon_gold_6443n:-
-
cpe:2.3:h:intel:xeon_gold_6444y:-
-
cpe:2.3:h:intel:xeon_gold_6448h:-
-
cpe:2.3:h:intel:xeon_gold_6448y:-
-
cpe:2.3:h:intel:xeon_gold_6454s:-
-
cpe:2.3:h:intel:xeon_gold_6458q:-
-
cpe:2.3:h:intel:xeon_gold_6526y:-
-
cpe:2.3:h:intel:xeon_gold_6530:-
-
cpe:2.3:h:intel:xeon_gold_6534:-
-
cpe:2.3:h:intel:xeon_gold_6538n:-
-
cpe:2.3:h:intel:xeon_gold_6538y+:-
-
cpe:2.3:h:intel:xeon_gold_6542y:-
-
cpe:2.3:h:intel:xeon_gold_6544y:-
-
cpe:2.3:h:intel:xeon_gold_6548n:-
-
cpe:2.3:h:intel:xeon_gold_6548y+:-
-
cpe:2.3:h:intel:xeon_gold_6554s:-
-
cpe:2.3:h:intel:xeon_gold_6558q:-
-
cpe:2.3:h:intel:xeon_platinum_8444h:-
-
cpe:2.3:h:intel:xeon_platinum_8450h:-
-
cpe:2.3:h:intel:xeon_platinum_8452y:-
-
cpe:2.3:h:intel:xeon_platinum_8454h:-
-
cpe:2.3:h:intel:xeon_platinum_8458p:-
-
cpe:2.3:h:intel:xeon_platinum_8460h:-
-
cpe:2.3:h:intel:xeon_platinum_8460y+:-
-
cpe:2.3:h:intel:xeon_platinum_8460y:-
-
cpe:2.3:h:intel:xeon_platinum_8461v:-
-
cpe:2.3:h:intel:xeon_platinum_8462y+:-
-
cpe:2.3:h:intel:xeon_platinum_8462y:-
-
cpe:2.3:h:intel:xeon_platinum_8468:-
-
cpe:2.3:h:intel:xeon_platinum_8468h:-
-
cpe:2.3:h:intel:xeon_platinum_8468v:-
-
cpe:2.3:h:intel:xeon_platinum_8470:-
-
cpe:2.3:h:intel:xeon_platinum_8470n:-
-
cpe:2.3:h:intel:xeon_platinum_8470q:-
-
cpe:2.3:h:intel:xeon_platinum_8471n:-
-
cpe:2.3:h:intel:xeon_platinum_8480+:-
-
cpe:2.3:h:intel:xeon_platinum_8480:-
-
cpe:2.3:h:intel:xeon_platinum_8490h:-
-
cpe:2.3:h:intel:xeon_platinum_8558:-
-
cpe:2.3:h:intel:xeon_platinum_8558p:-
-
cpe:2.3:h:intel:xeon_platinum_8558u:-
-
cpe:2.3:h:intel:xeon_platinum_8562y+:-
-
cpe:2.3:h:intel:xeon_platinum_8568y+:-
-
cpe:2.3:h:intel:xeon_platinum_8570:-
-
cpe:2.3:h:intel:xeon_platinum_8571n:-
-
cpe:2.3:h:intel:xeon_platinum_8580:-
-
cpe:2.3:h:intel:xeon_platinum_8581v:-
-
cpe:2.3:h:intel:xeon_platinum_8592+:-
-
cpe:2.3:h:intel:xeon_platinum_8592v:-
-
cpe:2.3:h:intel:xeon_platinum_8593q:-
-
cpe:2.3:h:intel:xeon_silver_4410t:-
-
cpe:2.3:h:intel:xeon_silver_4410y:-
-
cpe:2.3:h:intel:xeon_silver_4416+:-
-
cpe:2.3:h:intel:xeon_silver_4416:-
-
cpe:2.3:h:intel:xeon_silver_4509y:-
-
cpe:2.3:h:intel:xeon_silver_4510:-
-
cpe:2.3:h:intel:xeon_silver_4510t:-
-
cpe:2.3:h:intel:xeon_silver_4514y:-
-
cpe:2.3:h:intel:xeon_silver_4516y+:-
-
cpe:2.3:o:intel:xeon_bronze_3408u_firmware:-
-
cpe:2.3:o:intel:xeon_bronze_3508u_firmware:-
-
cpe:2.3:o:intel:xeon_gold_5403n_firmware:-
-
cpe:2.3:o:intel:xeon_gold_5411n_firmware:-
-
cpe:2.3:o:intel:xeon_gold_5412u_firmware:-
-
cpe:2.3:o:intel:xeon_gold_5415+_firmware:-
-
cpe:2.3:o:intel:xeon_gold_5415_firmware:-
-
cpe:2.3:o:intel:xeon_gold_5416s_firmware:-
-
cpe:2.3:o:intel:xeon_gold_5418n_firmware:-
-
cpe:2.3:o:intel:xeon_gold_5418y_firmware:-
-
cpe:2.3:o:intel:xeon_gold_5420+_firmware:-
-
cpe:2.3:o:intel:xeon_gold_5420_firmware:-
-
cpe:2.3:o:intel:xeon_gold_5423n_firmware:-
-
cpe:2.3:o:intel:xeon_gold_5433n_firmware:-
-
cpe:2.3:o:intel:xeon_gold_5512u_firmware:-
-
cpe:2.3:o:intel:xeon_gold_5515+_firmware:-
-
cpe:2.3:o:intel:xeon_gold_5520+_firmware:-
-
cpe:2.3:o:intel:xeon_gold_6403n_firmware:-
-
cpe:2.3:o:intel:xeon_gold_6414u_firmware:-
-
cpe:2.3:o:intel:xeon_gold_6416h_firmware:-
-
cpe:2.3:o:intel:xeon_gold_6418h_firmware:-
-
cpe:2.3:o:intel:xeon_gold_6421n_firmware:-
-
cpe:2.3:o:intel:xeon_gold_6423n_firmware:-
-
cpe:2.3:o:intel:xeon_gold_6426y_firmware:-
-
cpe:2.3:o:intel:xeon_gold_6428n_firmware:-
-
cpe:2.3:o:intel:xeon_gold_6430_firmware:-
-
cpe:2.3:o:intel:xeon_gold_6433n_firmware:-
-
cpe:2.3:o:intel:xeon_gold_6433ne_firmware:-
-
cpe:2.3:o:intel:xeon_gold_6434_firmware:-
-
cpe:2.3:o:intel:xeon_gold_6434h_firmware:-
-
cpe:2.3:o:intel:xeon_gold_6438m_firmware:-
-
cpe:2.3:o:intel:xeon_gold_6438n_firmware:-
-
cpe:2.3:o:intel:xeon_gold_6438y+_firmware:-
-
cpe:2.3:o:intel:xeon_gold_6438y_firmware:-
-
cpe:2.3:o:intel:xeon_gold_6442y_firmware:-
-
cpe:2.3:o:intel:xeon_gold_6443n_firmware:-
-
cpe:2.3:o:intel:xeon_gold_6444y_firmware:-
-
cpe:2.3:o:intel:xeon_gold_6448h_firmware:-
-
cpe:2.3:o:intel:xeon_gold_6448y_firmware:-
-
cpe:2.3:o:intel:xeon_gold_6454s_firmware:-
-
cpe:2.3:o:intel:xeon_gold_6458q_firmware:-
-
cpe:2.3:o:intel:xeon_gold_6526y_firmware:-
-
cpe:2.3:o:intel:xeon_gold_6530_firmware:-
-
cpe:2.3:o:intel:xeon_gold_6534_firmware:-
-
cpe:2.3:o:intel:xeon_gold_6538n_firmware:-
-
cpe:2.3:o:intel:xeon_gold_6538y+_firmware:-
-
cpe:2.3:o:intel:xeon_gold_6542y_firmware:-
-
cpe:2.3:o:intel:xeon_gold_6544y_firmware:-
-
cpe:2.3:o:intel:xeon_gold_6548n_firmware:-
-
cpe:2.3:o:intel:xeon_gold_6548y+_firmware:-
-
cpe:2.3:o:intel:xeon_gold_6554s_firmware:-
-
cpe:2.3:o:intel:xeon_gold_6558q_firmware:-
-
cpe:2.3:o:intel:xeon_platinum_8444h_firmware:-
-
cpe:2.3:o:intel:xeon_platinum_8450h_firmware:-
-
cpe:2.3:o:intel:xeon_platinum_8452y_firmware:-
-
cpe:2.3:o:intel:xeon_platinum_8454h_firmware:-
-
cpe:2.3:o:intel:xeon_platinum_8458p_firmware:-
-
cpe:2.3:o:intel:xeon_platinum_8460h_firmware:-
-
cpe:2.3:o:intel:xeon_platinum_8460y+_firmware:-
-
cpe:2.3:o:intel:xeon_platinum_8460y_firmware:-
-
cpe:2.3:o:intel:xeon_platinum_8461v_firmware:-
-
cpe:2.3:o:intel:xeon_platinum_8462y+_firmware:-
-
cpe:2.3:o:intel:xeon_platinum_8462y_firmware:-
-
cpe:2.3:o:intel:xeon_platinum_8468_firmware:-
-
cpe:2.3:o:intel:xeon_platinum_8468h_firmware:-
-
cpe:2.3:o:intel:xeon_platinum_8468v_firmware:-
-
cpe:2.3:o:intel:xeon_platinum_8470_firmware:-
-
cpe:2.3:o:intel:xeon_platinum_8470n_firmware:-
-
cpe:2.3:o:intel:xeon_platinum_8470q_firmware:-
-
cpe:2.3:o:intel:xeon_platinum_8471n_firmware:-
-
cpe:2.3:o:intel:xeon_platinum_8480+_firmware:-
-
cpe:2.3:o:intel:xeon_platinum_8480_firmware:-
-
cpe:2.3:o:intel:xeon_platinum_8490h_firmware:-
-
cpe:2.3:o:intel:xeon_platinum_8558_firmware:-
-
cpe:2.3:o:intel:xeon_platinum_8558p_firmware:-
-
cpe:2.3:o:intel:xeon_platinum_8558u_firmware:-
-
cpe:2.3:o:intel:xeon_platinum_8562y+_firmware:-
-
cpe:2.3:o:intel:xeon_platinum_8568y+_firmware:-
-
cpe:2.3:o:intel:xeon_platinum_8570_firmware:-
-
cpe:2.3:o:intel:xeon_platinum_8571n_firmware:-
-
cpe:2.3:o:intel:xeon_platinum_8580_firmware:-
-
cpe:2.3:o:intel:xeon_platinum_8581v_firmware:-
-
cpe:2.3:o:intel:xeon_platinum_8592+_firmware:-
-
cpe:2.3:o:intel:xeon_platinum_8592v_firmware:-
-
cpe:2.3:o:intel:xeon_platinum_8593q_firmware:-
-
cpe:2.3:o:intel:xeon_silver_4410t_firmware:-
-
cpe:2.3:o:intel:xeon_silver_4410y_firmware:-
-
cpe:2.3:o:intel:xeon_silver_4416+_firmware:-
-
cpe:2.3:o:intel:xeon_silver_4416_firmware:-
-
cpe:2.3:o:intel:xeon_silver_4509y_firmware:-
-
cpe:2.3:o:intel:xeon_silver_4510_firmware:-
-
cpe:2.3:o:intel:xeon_silver_4510t_firmware:-
-
cpe:2.3:o:intel:xeon_silver_4514y_firmware:-
-
cpe:2.3:o:intel:xeon_silver_4516y+_firmware:-