CVE-2026-20702
Received Received - Intake

Intel DCAP Protection Mechanism Failure Leads to Information Disclosure

Publication date: 2026-08-11

Last updated on: 2026-08-11

Assigner: Intel Corporation

Description
Protection mechanism failure for some Intel(R) Data Center Attestation Primitives (Intel(R) DCAP) may allow information disclosure. Unprivileged software adversary with an unauthenticated user combined with a low complexity attack may enable data exposure. This result may potentially occur via network access when attack requirements are present with special internal knowledge and requires no user interaction. The potential vulnerability may impact the confidentiality (none), integrity (high) and availability (none) of the vulnerable system, resulting in subsequent system confidentiality (high), integrity (none) and availability (none) impacts.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-08-11
Last Modified
2026-08-11
Generated
2026-08-11
AI Q&A
2026-08-11
EPSS Evaluated
N/A
NVD
CVE-2026-20702
EUVD
EUVD-2026-56470

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
intel data_center_attestation_primitives *

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-693 The product does not use or incorrectly uses a protection mechanism that provides sufficient defense against directed attacks against the product.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability is a protection mechanism failure in some Intel Data Center Attestation Primitives (Intel DCAP). An unauthenticated attacker with unprivileged access could exploit it to disclose sensitive data. The attack requires low complexity and no user interaction, potentially occurring via network access with special internal knowledge.

Impact Analysis

The vulnerability may lead to data exposure, compromising system confidentiality. While integrity and availability impacts are initially none, subsequent system confidentiality could be high. Attackers could exploit it to access sensitive information without needing elevated privileges.

Mitigation Strategies

Apply Intel's official security updates or patches for Intel DCAP as soon as they become available. Monitor Intel's advisories for mitigation guidance and ensure network segmentation to limit exposure. Disable unnecessary services related to Intel DCAP if not required.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-20702. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart