CVE-2026-20708: Intel AMT and Standard Manageability sensitive information in log file

CVE-2026-20708 · Severity: info · CVSS 5.9 · Published 2026-08-11

Intel Active Management Technology (AMT) and Standard Manageability are firmware-based remote management systems built into Intel chipsets and processors. This vulnerability allows insertion of sensitive information into log files, enabling an attacker with privileged network access to extract confidential data. An exploit could expose credentials, authentication tokens, or other sensitive operational details stored in system logs, compromising the security of managed systems across enterprises.

Technologies: Intel Active Management Technology (AMT), Intel Standard Manageability. Vendors: Intel.

Quick answers

Is CVE-2026-20708 exploited in the wild?
No. Junglewise Threat Intelligence has no report of CVE-2026-20708 being exploited in the wild.
How severe is CVE-2026-20708?
Informational severity, with a CVSS score of 5.9, published 11 August 2026.
Which products and versions are affected?
Intel Active Management Technology (AMT) Before 11.13.6, 11.23.6, 11.9.6, 12.1.5, 14.1.80, 15.0.56 (platform-dependent); Intel Standard Manageability Before 11.13.6, 11.23.6, 11.9.6, 12.1.5, 14.1.80, 15.0.56 (platform-dependent).
Is there a fix for CVE-2026-20708?
No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.
How is CVE-2026-20708 attacked?
It is attacked over the network, in device firmware.
Am I affected by CVE-2026-20708?
Check whether you run Intel Active Management Technology (AMT) or Intel Standard Manageability at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

Technical details

The vulnerability is classified as insertion of sensitive information into a log file (CWE-532) in Intel AMT and Standard Manageability firmware. An attacker with network access and elevated privileges can exploit a high-complexity attack path to extract confidential information from log files, causing information disclosure with high impact to confidentiality. The attack does not require user interaction and affects the firmware subsystem across multiple Intel chipset and processor families. Patches are available as firmware updates; affected users should update to versions 11.13.6, 11.23.6, 11.9.6, 12.1.5, 14.1.80, 15.0.56, or later depending on their platform.

Affected products

  • Intel Active Management Technology (AMT) Before 11.13.6, 11.23.6, 11.9.6, 12.1.5, 14.1.80, 15.0.56 (platform-dependent)
  • Intel Standard Manageability Before 11.13.6, 11.23.6, 11.9.6, 12.1.5, 14.1.80, 15.0.56 (platform-dependent)

Timeline

  • 2026-08-11: disclosed: Intel advisory INTEL-SA-01427 released

References

This page as Markdown. Free to reuse under CC BY 4.0 with a link back.