CVE-2026-20891

Analyzed Analyzed - Analysis Complete

Improper Authentication in Intel PROSet/Wireless WiFi Software

Publication date: 2026-08-11

Last updated on: 2026-08-26

Assigner: Intel Corporation

Description

Improper authentication for some Intel(R) PROSet/Wireless WiFi Software for Windows within Ring 2: Device Drivers may allow an escalation of privilege. Unprivileged software adversary with an unauthenticated user combined with a low complexity attack may enable local code execution. This result may potentially occur via local access when attack requirements are not present without special internal knowledge and requires no user interaction. The potential vulnerability may impact the confidentiality (low), integrity (none) and availability (none) of the vulnerable system, resulting in subsequent system confidentiality (high), integrity (low) and availability (low) impacts.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-08-11

Last Modified

2026-08-26

Generated

2026-09-01

AI Q&A

2026-08-11

EPSS Evaluated

2026-08-30

NVD

CVE-2026-20891

EUVD

EUVD-2026-56508

Affected Vendors & Products

Vendor	Product	Version / Range
intel	proset/wireless_wifi	to 24.10.0 (exc)

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-287	When an actor claims to have a given identity, the product does not prove or insufficiently proves that the claim is correct.

Attack-Flow Graph

Executive Summary

This vulnerability is an improper authentication issue in Intel PROSet/Wireless WiFi Software for Windows. It allows an unauthenticated attacker with local access to execute code on the system. The attack requires low complexity and no special knowledge or user interaction.

Detection Guidance

Detection requires checking for vulnerable Intel PROSet/Wireless WiFi Software versions on Windows systems. Use system inventory tools or commands like 'wmic product get name,version' to list installed software and verify if Intel PROSet/Wireless WiFi Software is present and matches affected versions.

Impact Analysis

An attacker could exploit this to gain local code execution, potentially leading to unauthorized access, data theft, or system compromise. It may allow escalation of privileges and impact system confidentiality, integrity, and availability.

Compliance Impact

This vulnerability could lead to unauthorized access or data breaches, which may violate GDPR or HIPAA requirements for data protection and confidentiality. Organizations must address it to maintain compliance.

Mitigation Strategies

Apply the latest security updates from Intel for PROSet/Wireless WiFi Software. Disable or uninstall the vulnerable software if updates are unavailable. Restrict local access to systems where possible and monitor for unusual activity.

Hi! I’m here to help you understand CVE-2026-20891. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70