CVE-2026-20901

Name of the Vulnerable Software and Affected Versions Intel(R) Xeon(R) processors (affected versions not specified)

Description Improper input validation within the firmware may allow an escalation of privilege. A privileged user, combined with a high complexity attack targeting startup code and the System Management Mode (SMM)—a highly privileged execution mode in x86 processors—may enable data alteration. This issue can be triggered via local access without requiring user interaction or special internal knowledge, resulting in a high impact on system integrity.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.