Out-of-Bounds Write Vulnerability Affecting Intel Server Boards
CVE-2026-57882

8.7HIGH

Key Information:

Vendor

Intel
Status
Intel(r) Server Board D50dnp And Intel(r) Server Board M50fcp
Vendor
CVE Published:
10 November 2026

What is CVE-2026-57882?

An out-of-bounds write vulnerability in the XmlCliCommonDxe component of Intel Server Board D50DNP and M50FCP within Ring 0 UEFI can lead to privilege escalation. Attackers with local access may exploit this flaw to execute arbitrary code without requiring user interaction. This vulnerability poses significant risks to system confidentiality, integrity, and availability, potentially allowing adversaries to disrupt critical functionality and compromise sensitive information.

Affected Version(s)

Intel(R) Server Board D50DNP and Intel(R) Server Board M50FCP See references

References

https://intel.com/content/www/us/en/security-center/advis...

CVSS V4

Score:
8.7
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
High
Attack Required:
Physical
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.