Information Disclosure Vulnerability in Intel Server Boards

CVE-2026-50249

What is CVE-2026-50249?

An out-of-bounds read vulnerability has been identified in the GenerationSetup for Intel Server Board D50DNP and Intel Server Board M50FCP. This flaw may lead to information disclosure under specific attack scenarios where a local adversary with high complexity can exploit the startup code and SMM (System Management Mode). The risk is present without requiring user interaction, highlighting a potential exposure to sensitive data when certain attack conditions are met, necessitating privileged access for successful exploitation.

References