Information Disclosure Vulnerability in Intel Data Center Attestation Primitives
CVE-2026-20702

8.9HIGH

Key Information:

Vendor

Intel
Status
Intel(r) Data Center Attestation Primitives (intel(r) Dcap) May Allow Information Disclosure. Unprivileged Software Adversary With An Unauthenticated User Combined With A Low Complexity Attack May Enable Data Exposure. This Result May Potentially Occur Via Network Access When Attack Requirements Are Present With Special Internal Knowledge And Requires No User Interaction. The Potential Vulnerability May Impact The Confidentiality (none), Integrity (high) And Availability (none) Of The Vulnerable System, Resulting In Subsequent System Confidentiality (high), Integrity (none) And Availability (none) Impacts.
Vendor
CVE Published:
11 August 2026

What is CVE-2026-20702?

A vulnerability in Intel Data Center Attestation Primitives (DCAP) could allow unauthorized information disclosure. An unprivileged adversary with unauthenticated access may exploit this weakness, requiring minimal complexity for a potential attack. The exposure of sensitive data may occur remotely without any user interaction, demanding a specific internal knowledge to execute. This vulnerability can adversely affect system confidentiality while maintaining the integrity and availability of the system.

Affected Version(s)

Intel(R) Data Center Attestation Primitives (Intel(R) DCAP) may allow information disclosure. Unprivileged software adversary with an unauthenticated user combined with a low complexity attack may enable data exposure. This result may potentially occur via network access when attack requirements are present with special internal knowledge and requires no user interaction. The potential vulnerability may impact the confidentiality (none), integrity (high) and availability (none) of the vulnerable system, resulting in subsequent system confidentiality (high), integrity (none) and availability (none) impacts. See references

References

https://intel.com/content/www/us/en/security-center/advis...

CVSS V4

Score:
8.9
Severity:
HIGH
Confidentiality:
None
Integrity:
High
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Attack Required:
Physical
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.