CVE-2026-20891 - Vulnerability Details

Improper authentication for some Intel(R) PROSet/Wireless WiFi Software for Windows within Ring 2: Device Drivers may allow an escalation of privilege. Unprivileged software adversary with an unauthenticated user combined with a low complexity attack may enable local code execution. This result may potentially occur via local access when attack requirements are not present without special internal knowledge and requires no user interaction. The potential vulnerability may impact the confidentiality (low), integrity (none) and availability (none) of the vulnerable system, resulting in subsequent system confidentiality (high), integrity (low) and availability (low) impacts.

Attack Vector Local

Attack Complexity Low

Privileges Required None

Attack Requirements None

User Interaction None

Vulnerable System Confidentiality Impact Low

Vulnerable System Integrity Impact None

Vulnerable System Availability Impact None

Subsequent System Confidentiality Impact High

Subsequent System Integrity Impact Low

Subsequent System Availability Impact Low

Attack Vector Local

Attack Complexity Low

Privileges Required Low

Scope Changed

Confidentiality Impact High

Integrity Impact Low

Availability Impact Low

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

The EPSS score is 0.00158.

Key SSVC decision points have not yet been added.

Vendors	Products
Intel Subscribe	Intel Proset Wireless Wifi Software For Windows Subscribe Killer Wi-fi 6 Ax1650i\/s Subscribe Killer Wi-fi 6e Ax1675i\/s Subscribe Killer Wi-fi 6e Ax1675x\/w Subscribe Killer Wi-fi 7 Be1750i\/s Subscribe Killer Wi-fi 7 Be1750x\/w Subscribe Killer Wi-fi 7 Be1775i\/s Subscribe Proset\/wireless Wifi Subscribe Wi-fi 6 Ax200 Subscribe Wi-fi 6 Ax201 Subscribe Wi-fi 6 Ax210 Subscribe Wi-fi 6e Ax211 Subscribe Wi-fi 7 Be200 Subscribe Wi-fi 7 Be201 Subscribe Wi-fi 7 Be211 Subscribe Wi-fi 7 Be213 Subscribe Wireless-ac 9461 Subscribe Wireless-ac 9462 Subscribe Wireless-ac 9560 Subscribe

Configuration 1 [-]

AND

cpe:2.3:a:intel:proset\/wireless_wifi:*:*:*:*:*:*:*:*

OR	cpe:2.3:h:intel:killer_wi-fi_6_ax1650i\/s:-:::::::*
	cpe:2.3:h:intel:killer_wi-fi_6e_ax1675i\/s:-:::::::*
	cpe:2.3:h:intel:killer_wi-fi_6e_ax1675x\/w:-:::::::*
	cpe:2.3:h:intel:killer_wi-fi_7_be1750i\/s:-:::::::*
	cpe:2.3:h:intel:killer_wi-fi_7_be1750x\/w:-:::::::*
	cpe:2.3:h:intel:killer_wi-fi_7_be1775i\/s:-:::::::*
	cpe:2.3:h:intel:wi-fi_6_ax200:-:::::::*
	cpe:2.3:h:intel:wi-fi_6_ax201:-:::::::*
	cpe:2.3:h:intel:wi-fi_6_ax210:-:::::::*
	cpe:2.3:h:intel:wi-fi_6e_ax211:-:::::::*
	cpe:2.3:h:intel:wi-fi_7_be200:-:::::::*
	cpe:2.3:h:intel:wi-fi_7_be201:-:::::::*
	cpe:2.3:h:intel:wi-fi_7_be211:-:::::::*
	cpe:2.3:h:intel:wi-fi_7_be213:-:::::::*
	cpe:2.3:h:intel:wireless-ac_9461:-:::::::*
	cpe:2.3:h:intel:wireless-ac_9462:-:::::::*
	cpe:2.3:h:intel:wireless-ac_9560:-:::::::*

No data.

OpenCVE Enrichment is a feature of OpenCVE that uses AI to automatically link vendors and products to CVEs. Learn more on GitHub.

Vendors	Products
Intel Subscribe	Intel Proset Wireless Wifi Software For Windows Subscribe

Advisories

No advisories yet.

Fixes

Solution

No solution given by the vendor.

Workaround

No workaround given by the vendor.

References

Link	Providers
https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01422.html

History

Wed, 26 Aug 2026 19:45:00 +0000

Type	Values Removed	Values Added
First Time appeared		Intel killer Wi-fi 6 Ax1650i\/s Intel killer Wi-fi 6e Ax1675i\/s Intel killer Wi-fi 6e Ax1675x\/w Intel killer Wi-fi 7 Be1750i\/s Intel killer Wi-fi 7 Be1750x\/w Intel killer Wi-fi 7 Be1775i\/s Intel proset\/wireless Wifi Intel wi-fi 6 Ax200 Intel wi-fi 6 Ax201 Intel wi-fi 6 Ax210 Intel wi-fi 6e Ax211 Intel wi-fi 7 Be200 Intel wi-fi 7 Be201 Intel wi-fi 7 Be211 Intel wi-fi 7 Be213 Intel wireless-ac 9461 Intel wireless-ac 9462 Intel wireless-ac 9560
CPEs		cpe:2.3:a:intel:proset\/wireless_wifi:::::::: cpe:2.3:h:intel:killer_wi-fi_6_ax1650i\/s:-:::::::* cpe:2.3:h:intel:killer_wi-fi_6e_ax1675i\/s:-:::::::* cpe:2.3:h:intel:killer_wi-fi_6e_ax1675x\/w:-:::::::* cpe:2.3:h:intel:killer_wi-fi_7_be1750i\/s:-:::::::* cpe:2.3:h:intel:killer_wi-fi_7_be1750x\/w:-:::::::* cpe:2.3:h:intel:killer_wi-fi_7_be1775i\/s:-:::::::* cpe:2.3:h:intel:wi-fi_6_ax200:-:::::::* cpe:2.3:h:intel:wi-fi_6_ax201:-:::::::* cpe:2.3:h:intel:wi-fi_6_ax210:-:::::::* cpe:2.3:h:intel:wi-fi_6e_ax211:-:::::::* cpe:2.3:h:intel:wi-fi_7_be200:-:::::::* cpe:2.3:h:intel:wi-fi_7_be201:-:::::::* cpe:2.3:h:intel:wi-fi_7_be211:-:::::::* cpe:2.3:h:intel:wi-fi_7_be213:-:::::::* cpe:2.3:h:intel:wireless-ac_9461:-:::::::* cpe:2.3:h:intel:wireless-ac_9462:-:::::::* cpe:2.3:h:intel:wireless-ac_9560:-:::::::*
Vendors & Products		Intel killer Wi-fi 6 Ax1650i\/s Intel killer Wi-fi 6e Ax1675i\/s Intel killer Wi-fi 6e Ax1675x\/w Intel killer Wi-fi 7 Be1750i\/s Intel killer Wi-fi 7 Be1750x\/w Intel killer Wi-fi 7 Be1775i\/s Intel proset\/wireless Wifi Intel wi-fi 6 Ax200 Intel wi-fi 6 Ax201 Intel wi-fi 6 Ax210 Intel wi-fi 6e Ax211 Intel wi-fi 7 Be200 Intel wi-fi 7 Be201 Intel wi-fi 7 Be211 Intel wi-fi 7 Be213 Intel wireless-ac 9461 Intel wireless-ac 9462 Intel wireless-ac 9560
Metrics		cvssV3_1 `{'score': 7.9, 'vector': 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:L/A:L'}`

Thu, 13 Aug 2026 11:00:00 +0000

Type	Values Removed	Values Added
First Time appeared		Intel Intel intel Proset Wireless Wifi Software For Windows
Vendors & Products		Intel Intel intel Proset Wireless Wifi Software For Windows

Wed, 12 Aug 2026 22:45:00 +0000

Type	Values Removed	Values Added
Title		Improper Authentication in Intel PROSet/Wireless WiFi Driver Enables Local Privilege Escalation

Tue, 11 Aug 2026 17:00:00 +0000

Type	Values Removed	Values Added
Description		Improper authentication for some Intel(R) PROSet/Wireless WiFi Software for Windows within Ring 2: Device Drivers may allow an escalation of privilege. Unprivileged software adversary with an unauthenticated user combined with a low complexity attack may enable local code execution. This result may potentially occur via local access when attack requirements are not present without special internal knowledge and requires no user interaction. The potential vulnerability may impact the confidentiality (low), integrity (none) and availability (none) of the vulnerable system, resulting in subsequent system confidentiality (high), integrity (low) and availability (low) impacts.
Weaknesses		CWE-287
References		https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01422.html
Metrics		cvssV4_0 `{'score': 6.3, 'vector': 'CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:H/SI:L/SA:L'}`

Projects

Sign in to view the affected projects.

MITRE

Status: PUBLISHED

Assigner: intel

Published: 2026-08-11T16:27:03.157Z

Updated: 2026-08-12T15:33:20.113Z

Reserved: 2025-12-03T18:04:52.948Z

Link: CVE-2026-20891

Vulnrichment

No data.

NVD

Status : Analyzed

Published: 2026-08-11T17:17:54.237

Modified: 2026-08-26T19:26:54.013

Link: CVE-2026-20891

Redhat

No data.

OpenCVE Enrichment

Updated: 2026-08-13T10:40:35Z

Weaknesses

CWE-287

Metrics

Attack Vector Local

Attack Complexity Low

Privileges Required None

Attack Requirements None

User Interaction None

Vulnerable System Confidentiality Impact Low

Vulnerable System Integrity Impact None

Vulnerable System Availability Impact None

Subsequent System Confidentiality Impact High

Subsequent System Integrity Impact Low

Subsequent System Availability Impact Low

Attack Vector Local

Attack Complexity Low

Privileges Required Low

Scope Changed

Confidentiality Impact High

Integrity Impact Low

Availability Impact Low

User Interaction None

Affected Vendors & Products

Projects

JSON object

JSON object

JSON object

JSON object

JSON object