Deserialization Vulnerability in Intel Neural Compressor Software
CVE-2026-49028

4.8MEDIUM

Key Information:

Vendor

Intel
Status
Intel(r) Neural Compressor Software
Vendor
CVE Published:
10 November 2026

What is CVE-2026-49028?

A deserialization flaw exists in Intel Neural Compressor software prior to version 3.8, allowing local unprivileged users to potentially execute a denial of service attack. This vulnerability can be exploited without special knowledge or user interaction, which raises concerns for system availability. While the risk to confidentiality and integrity is relatively low, organizations should apply available security updates to mitigate potential impacts.

Affected Version(s)

Intel(R) Neural Compressor software before version 3.8

References

https://intel.com/content/www/us/en/security-center/advis...

CVSS V4

Score:
4.8
Severity:
MEDIUM
Confidentiality:
None
Integrity:
Low
Availability:
Low
Attack Vector:
Local
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.