Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2026-20885

Improper authentication in the Intel(R) TDX module for some Intel(R) platforms within Ring 0: Trust Domain may allow an information disclosure and escalation of privilege. System software adversary with a privileged user combined with a high complexity attack may enable escalation of privilege. This result may potentially occur via local access when attack requirements are present without special internal knowledge and requires no user interaction. The potential vulnerability may impact the confidentiality (high), integrity (high) and availability (none) of the vulnerable system, resulting in subsequent system confidentiality (low), integrity (low) and availability (none) impacts.

Security Impact Summary

This vulnerability carries a HIGH severity rating with a CVSS v3.1 score of 7.2, requiring local system access to exploit but requires specific conditions to be met without requiring user interaction . The vulnerability impacts confidentiality (data exposure), integrity (unauthorized modifications), for affected systems. Impacting 153 products from intel, from intel, from intel and 150 others, organizations running these solutions should prioritize assessment and patching.

Historical Context

Reported in 2026, this vulnerability emerged during an era marked by increased sophistication in supply chain attacks, cloud infrastructure vulnerabilities, and software-as-a-service (SaaS) security challenges. Security practices during this period emphasized zero-trust architectures, container security, and API protection.

Published

2026-08-11T17:17:53.850

Last Modified

2026-08-31T14:33:23.303

Status

Analyzed

Source

[email protected]

Severity

CVSSv3.1: 7.2 (HIGH)

Weaknesses
  • Type: Primary
    CWE-287
  • Type: Secondary
    CWE-287
Affected Vendors & Products
Type Vendor Product Version/Range Vulnerable?
Operating System intel tdx_module ≤ 1.5.28 Yes
Hardware intel xeon_bronze_3408u - No
Hardware intel xeon_gold_5411n - No
Hardware intel xeon_gold_5412u - No
Hardware intel xeon_gold_5415 - No
Hardware intel xeon_gold_5416s - No
Hardware intel xeon_gold_5418n - No
Hardware intel xeon_gold_5418y - No
Hardware intel xeon_gold_5420 - No
Hardware intel xeon_gold_6414u - No
Hardware intel xeon_gold_6416h - No
Hardware intel xeon_gold_6418h - No
Hardware intel xeon_gold_6421n - No
Hardware intel xeon_gold_6426y - No
Hardware intel xeon_gold_6428n - No
Hardware intel xeon_gold_6430 - No
Hardware intel xeon_gold_6434 - No
Hardware intel xeon_gold_6434h - No
Hardware intel xeon_gold_6438m - No
Hardware intel xeon_gold_6438n - No
Hardware intel xeon_gold_6438y - No
Hardware intel xeon_gold_6442y - No
Hardware intel xeon_gold_6444y - No
Hardware intel xeon_gold_6448h - No
Hardware intel xeon_gold_6448y - No
Hardware intel xeon_gold_6454s - No
Hardware intel xeon_gold_6458q - No
Hardware intel xeon_platinum_8444h - No
Hardware intel xeon_platinum_8450h - No
Hardware intel xeon_platinum_8452y - No
Hardware intel xeon_platinum_8454h - No
Hardware intel xeon_platinum_8458p - No
Hardware intel xeon_platinum_8460h - No
Hardware intel xeon_platinum_8460y - No
Hardware intel xeon_platinum_8461v - No
Hardware intel xeon_platinum_8462y - No
Hardware intel xeon_platinum_8468 - No
Hardware intel xeon_platinum_8468h - No
Hardware intel xeon_platinum_8468v - No
Hardware intel xeon_platinum_8470 - No
Hardware intel xeon_platinum_8470n - No
Hardware intel xeon_platinum_8470q - No
Hardware intel xeon_platinum_8471n - No
Hardware intel xeon_platinum_8480 - No
Hardware intel xeon_silver_4410tm - No
Hardware intel xeon_silver_4410y - No
Hardware intel xeon_silver_4416 - No
Operating System intel tdx_module ≤ 1.5.28 Yes
Hardware intel xeon_bronze_3508u - No
Hardware intel xeon_gold_5512u - No
Hardware intel xeon_gold_5515\+ - No
Hardware intel xeon_gold_5520\+ - No
Hardware intel xeon_gold_6526y - No
Hardware intel xeon_gold_6530 - No
Hardware intel xeon_gold_6534 - No
Hardware intel xeon_gold_6538n - No
Hardware intel xeon_gold_6538y\+ - No
Hardware intel xeon_gold_6542y - No
Hardware intel xeon_gold_6544y - No
Hardware intel xeon_gold_6548n - No
Hardware intel xeon_gold_6548y\+ - No
Hardware intel xeon_gold_6554s - No
Hardware intel xeon_gold_6558q - No
Hardware intel xeon_platinum_8558 - No
Hardware intel xeon_platinum_8558p - No
Hardware intel xeon_platinum_8558u - No
Hardware intel xeon_platinum_8562y\+ - No
Hardware intel xeon_platinum_8568y\+ - No
Hardware intel xeon_platinum_8570 - No
Hardware intel xeon_platinum_8571n - No
Hardware intel xeon_platinum_8580 - No
Hardware intel xeon_platinum_8581v - No
Hardware intel xeon_platinum_8592\+ - No
Hardware intel xeon_platinum_8592v - No
Hardware intel xeon_platinum_8593q - No
Hardware intel xeon_silver_4509y - No
Hardware intel xeon_silver_4510 - No
Hardware intel xeon_silver_4510t - No
Hardware intel xeon_silver_4514y - No
Hardware intel xeon_silver_4516y\+ - No
Operating System intel tdx_module ≤ 2.0.16 Yes
Hardware intel xeon_4108 - No
Hardware intel xeon_6315p - No
Hardware intel xeon_6325p - No
Hardware intel xeon_6333p - No
Hardware intel xeon_6337p - No
Hardware intel xeon_6349p - No
Hardware intel xeon_6353p - No
Hardware intel xeon_6357p - No
Hardware intel xeon_6369p - No
Hardware intel xeon_6377p - No
Hardware intel xeon_6503p - No
Hardware intel xeon_6503p-b - No
Hardware intel xeon_6505p - No
Hardware intel xeon_6507p - No
Hardware intel xeon_6511p - No
Hardware intel xeon_6513p-b - No
Hardware intel xeon_6515p - No
Hardware intel xeon_6516p-b - No
Hardware intel xeon_6517p - No
Hardware intel xeon_6518p-b - No
Hardware intel xeon_6520p - No
Hardware intel xeon_6521p - No
Hardware intel xeon_6523p-b - No
Hardware intel xeon_6527p - No
Hardware intel xeon_6530p - No
Hardware intel xeon_6532p-b - No
Hardware intel xeon_6533p-b - No
Hardware intel xeon_6543p-b - No
Hardware intel xeon_6544p-b - No
Hardware intel xeon_6546p-b - No
Hardware intel xeon_6548p-b - No
Hardware intel xeon_6553p-b - No
Hardware intel xeon_6556p-b - No
Hardware intel xeon_6563p-b - No
Hardware intel xeon_6706p-b - No
Hardware intel xeon_6714p - No
Hardware intel xeon_6716p-b - No
Hardware intel xeon_6718p-b - No
Hardware intel xeon_6724p - No
Hardware intel xeon_6725p - No
Hardware intel xeon_6726p-b - No
Hardware intel xeon_6728p - No
Hardware intel xeon_6730p - No
Hardware intel xeon_6731p - No
Hardware intel xeon_6732p - No
Hardware intel xeon_6736p - No
Hardware intel xeon_6737p - No
Hardware intel xeon_6738p - No
Hardware intel xeon_6740p - No
Hardware intel xeon_6741p - No
Hardware intel xeon_6745p - No
Hardware intel xeon_6747p - No
Hardware intel xeon_6748p - No
Hardware intel xeon_6756p-b - No
Hardware intel xeon_6760p - No
Hardware intel xeon_6761p - No
Hardware intel xeon_6766p-b - No
Hardware intel xeon_6767p - No
Hardware intel xeon_6768p - No
Hardware intel xeon_6768p-b - No
Hardware intel xeon_6774p - No
Hardware intel xeon_6776p - No
Hardware intel xeon_6776p-b - No
Hardware intel xeon_6781p - No
Hardware intel xeon_6787p - No
Hardware intel xeon_6788p - No
Hardware intel xeon_6944p - No
Hardware intel xeon_6952p - No
Hardware intel xeon_6960p - No
Hardware intel xeon_6962p - No
Hardware intel xeon_6972p - No
Hardware intel xeon_6978p - No
Hardware intel xeon_6979p - No
Hardware intel xeon_6980p - No
Operating System intel tdx_module ≤ 2.0.16 Yes
Hardware intel xeon_6503p-b - No
Hardware intel xeon_6513p-b - No
Hardware intel xeon_6516p-b - No
Hardware intel xeon_6518p-b - No
Hardware intel xeon_6523p-b - No
Hardware intel xeon_6532p-b - No
Hardware intel xeon_6533p-b - No
Hardware intel xeon_6543p-b - No
Hardware intel xeon_6544p-b - No
Hardware intel xeon_6546p-b - No
Hardware intel xeon_6548p-b - No
Hardware intel xeon_6553p-b - No
Hardware intel xeon_6556p-b - No
Hardware intel xeon_6563p-b - No
Hardware intel xeon_6706p-b - No
Hardware intel xeon_6716p-b - No
Hardware intel xeon_6718p-b - No
Hardware intel xeon_6726p-b - No
Hardware intel xeon_6756p-b - No
Hardware intel xeon_6766p-b - No
Hardware intel xeon_6768p-b - No
Hardware intel xeon_6776p-b - No
References

How SecUtils Interprets This CVE

SecUtils normalizes and enriches National Vulnerability Database (NVD) records by standardizing vendor and product identifiers, aggregating vulnerability metadata from both NVD and MITRE sources, and providing structured context for security teams. For intel's affected products, we extract Common Platform Enumeration (CPE) data, Common Weakness Enumeration (CWE) classifications, CVSS severity metrics, and reference data to enable rapid vulnerability prioritization and asset correlation. This record contains no exploit code, proof-of-concept instructions, or attack methodologies—only defensive intelligence necessary for patch management, risk assessment, and security operations.