EUVD-2026-56487
GHSA-3xg4-grj9-qjqq
Severity by source
CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Local access with high privilege required (AV:L, PR:H); scope unchanged and no integrity or availability impact per description; confidentiality-only disclosure within the local system.
Primary rating from Vendor (intel).
CVSS VectorVendor: intel
Lifecycle Timeline
1DescriptionCVE.org
Improper authentication for some Intel(R) PROSet/Wireless WiFi Software within Ring 0: Kernel may allow an information disclosure. System software adversary with a privileged user combined with a low complexity attack may enable data exposure. This result may potentially occur via local access when attack requirements are not present without special internal knowledge and requires no user interaction. The potential vulnerability may impact the confidentiality (high), integrity (none) and availability (none) of the vulnerable system, resulting in subsequent system confidentiality (none), integrity (none) and availability (none) impacts.
AnalysisAI
Information disclosure in Intel PROSet/Wireless WiFi Software at Ring 0 (kernel level) exposes sensitive system data to privileged local adversaries who bypass improper authentication controls within the kernel driver. Affected systems include any platform running Intel PROSet/Wireless WiFi Software, with the exact version range deferred to Intel Security Advisory INTEL-SA-01468. No active exploitation has been confirmed (not listed in CISA KEV), no public exploit code has been identified, and the CVSS 4.0 base score of 6.7 reflects the significant mitigation offered by the high-privilege local access prerequisite.
Technical ContextAI
Intel PROSet/Wireless WiFi Software is the driver and management suite for Intel wireless network adapters, operating at Ring 0 - the kernel privilege level where code runs with unrestricted hardware access. The affected component resides within this kernel layer, meaning a flaw here has direct access to system memory and driver state without the isolation that user-mode software provides. CWE-287 (Improper Authentication) is the root cause class: the kernel-level code fails to correctly verify the identity or authorization of a requesting entity, allowing a high-privilege system software adversary to circumvent authentication checks. The CPE string cpe:2.3:a:n/a:intel(r)_proset/wireless_wifi_software:*:*:*:*:*:*:*:* uses a wildcard version, indicating that specific affected version ranges are enumerated in the vendor advisory rather than the NVD CPE data. The flaw is reported by Intel itself and assigned ENISA EUVD ID EUVD-2026-56487.
RemediationAI
Apply the patched version of Intel PROSet/Wireless WiFi Software identified in Intel Security Advisory INTEL-SA-01468, available at https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01468.html. The exact fixed version number was not present in the provided intelligence data and must be confirmed directly from that advisory - do not rely on the CPE wildcard for version guidance. If immediate patching is not feasible, compensating controls should focus on restricting which processes and accounts can interact with kernel-level wireless driver interfaces: enforce strict least-privilege policies so that only explicitly authorized system software runs with Ring 0 or high-privilege access, and audit kernel module and driver signing policies to reduce the attack surface for a system software adversary to position themselves for exploitation. These controls reduce exposure but do not eliminate the underlying flaw; patching remains the definitive remediation.
LibreNMS before 24.10.0 allows a remote attacker to execute arbitrary code via OS command injection involving AboutContr
Reachable assertion in Open5GS up to version 2.7.6 allows remote unauthenticated attackers to crash the Diameter CER han
A Command Injection issue in the payload build page in BYOB (Build Your Own Botnet) 2.0 allows attackers to execute arbi
Denial of service in Open5GS 2.7.6 and earlier allows network-adjacent attackers with low-privilege Diameter Gx peer acc
Denial of service in Open5GS HSS (Home Subscriber Server) versions 2.7.0 through 2.7.6 is triggered remotely by manipula
Remote command injection in Control Web Panel allows unauthenticated attackers to execute arbitrary OS commands as root
LINQPad before 5.52.01 Pro edition is vulnerable to Unsafe Deserialization in LINQPad.AutoRefManager::PopulateFromCache(
Remote code execution in dash-uploader (Python package for Plotly Dash) versions 0.1.0 through 0.7.0a2 allows unauthenti
Command injection in LiteLLM 1.18.10 lets attackers who can configure MCP (Model Context Protocol) servers supply arbitr
SQL injection in AzuraCast's backup restore flow (versions up to and including 0.23.7) lets an attacker achieve privileg
Arbitrary file read in Yu AI Code Mother v4.3 lets anonymous, remote attackers retrieve files outside the intended previ
Remote code execution in APScheduler (all versions through 3.10.x and 4.0.0a5) is achievable when applications deseriali
Same weakness CWE-287 – Improper Authentication
View allSame technique Authentication Bypass
View allShare
External POC / Exploit Code
Leaving vuln.today