Improper Authentication in Intel products - CVE-2026-20891

Vulnerability identifier: #VU144043

CSH Severity: Low

CVSS v4: 7 [CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:H/VI:L/VA:L/SC:N/SI:N/SA:N]

CVE-ID: CVE-2026-20891

CWE-ID: CWE-287

Exploitation vector: Local access

Exploit availability: No public exploit available

The vulnerability allows a local attacker to bypass authentication process.

The vulnerability exists due to an error in when processing authentication requests. A local attacker can bypass authentication process and gain elevated privileges on the system.

13th Generation Intel Core i9 Processors
Panther Lake H 4P+8E+4LP_E+12Xe Product
Intel Core Ultra Processors (Series 3)
Intel Core Ultra Processors (Series 1)
Intel Core 9
Intel Core Processor U-series
Intel Core processors (Series 2)
Intel Core processors (Series 1)
Intel Core i9 processor 14900HX
10th Generation Intel Core Processor Family
14th Generation Intel Core Processor Family
13th Generation Intel Core Processor Family
12th Generation Intel Core Processor Family
11th Generation Intel Core Processor Family
Intel Celeron Processor Family
Intel Pentium Gold Processor Family
Intel Pentium Processor 6800 Series
Intel Wireless-AC 9461
Intel Wireless-AC 9462
Intel Wireless-AC 9560
Intel Wi-Fi 6 AX200
Intel Wi-Fi 6 AX201 & Killer 1650i/s2
Intel Wi-Fi 6E AX210 & Killer 1675x/w
Intel Wi-Fi 6E AX211 & Killer 1675i/s2
Intel Wi-Fi 7 BE200 & Killer 1750x/w2
Intel Wi-Fi 7 BE201 & Killer 1750i/s2
Intel Wi-Fi 7 BE211 & Killer 1775i/s
Intel Wi-Fi 7 BE213
Intel Core Ultra Processors Series 2

Install updates from vendor's website.

Intel Wireless-AC 9461 - update to 24.10
Intel Wireless-AC 9462 - update to 24.10
Intel Wireless-AC 9560 - update to 24.10
Intel Wi-Fi 6 AX200 - update to 24.10
Intel Wi-Fi 6 AX201 & Killer 1650i/s2 - update to 24.10
Intel Wi-Fi 6E AX210 & Killer 1675x/w - update to 24.10
Intel Wi-Fi 6E AX211 & Killer 1675i/s2 - update to 24.10
Intel Wi-Fi 7 BE200 & Killer 1750x/w2 - update to 24.10
Intel Wi-Fi 7 BE201 & Killer 1750i/s2 - update to 24.10
Intel Wi-Fi 7 BE211 & Killer 1775i/s - update to 24.10
Intel Wi-Fi 7 BE213 - update to 24.10

• https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01422.html

• Multiple vulnerabilities in Intel PROSet/Wireless WiFi