CVE-2026-20901: Intel Xeon Bronze 3408u

Medium severity, CVSS 5.3. EPSS: 0.1% chance of exploitation in the next 30 days.

Improper input validation for some Intel(R) Xeon(R) processors within firmware may allow an escalation of privilege. Startup code and smm adversary with a privileged user combined with a high complexity attack may enable data alteration. This result may potentially occur via local access when attack requirements are present without special internal knowledge and requires no user interaction. The potential vulnerability may impact the confidentiality (none), integrity (none) and availability (none) of the vulnerable system, resulting in subsequent system confidentiality (none), integrity (high) and availability (none) impacts.

Affected products

• Intel Xeon Bronze 3408u: affected versions not specified
• Intel Xeon Bronze 3408u Firmware: affected versions not specified
• Intel Xeon Bronze 3508u Firmware: affected versions not specified
• Intel Xeon Gold 5403n Firmware: affected versions not specified
• Intel Xeon Gold 5411n: affected versions not specified
• Intel Xeon Gold 5411n Firmware: affected versions not specified
• Intel Xeon Gold 5412u: affected versions not specified
• Intel Xeon Gold 5412u Firmware: affected versions not specified
• Intel Xeon Gold 5415: affected versions not specified
• Intel Xeon Gold 5415+ Firmware: affected versions not specified
• Intel Xeon Gold 5415 Firmware: affected versions not specified
• Intel Xeon Gold 5416s: affected versions not specified
• Intel Xeon Gold 5416s Firmware: affected versions not specified
• Intel Xeon Gold 5418n: affected versions not specified
• Intel Xeon Gold 5418n Firmware: affected versions not specified
• Intel Xeon Gold 5418y: affected versions not specified
• Intel Xeon Gold 5418y Firmware: affected versions not specified
• Intel Xeon Gold 5420: affected versions not specified
• Intel Xeon Gold 5420+ Firmware: affected versions not specified
• Intel Xeon Gold 5420 Firmware: affected versions not specified
• Intel Xeon Gold 5423n Firmware: affected versions not specified
• Intel Xeon Gold 5433n Firmware: affected versions not specified
• Intel Xeon Gold 5512u Firmware: affected versions not specified
• Intel Xeon Gold 5515+ Firmware: affected versions not specified
• Intel Xeon Gold 5520+ Firmware: affected versions not specified
• and 116 more

Published 2026-08-11. Last modified 2026-08-28.