Is CVE-2026-20715 exploited in the wild?

No. Junglewise Threat Intelligence has no report of CVE-2026-20715 being exploited in the wild.

How severe is CVE-2026-20715?

Informational severity, with a CVSS score of 8.2, published 11 August 2026.

Which products and versions are affected?

Intel Active Management Technology (AMT) Multiple generations across Kaby Lake through Sapphire Rapids; Intel Standard Manageability Multiple generations across Kaby Lake through Sapphire Rapids.

Is there a fix for CVE-2026-20715?

No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.

How is CVE-2026-20715 attacked?

It is attacked over the network, in device firmware.

Am I affected by CVE-2026-20715?

Check whether you run Intel Active Management Technology (AMT) or Intel Standard Manageability at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

CVE-2026-20715: Intel Active Management Technology improper input validation denial of service

CVE-2026-20715 · Severity: info · CVSS 8.2 · Published 2026-08-11

Intel Active Management Technology (AMT) and Standard Manageability are firmware management interfaces that enable remote administration of Intel-based systems. An improper input validation flaw allows unauthenticated network attackers to trigger denial of service attacks, making managed systems unavailable. While this does not enable data theft or unauthorized access, it can disrupt critical business operations dependent on these systems remaining available.

Technologies: Intel Active Management Technology (AMT), Intel Standard Manageability. Vendors: Intel.

Quick answers

Is CVE-2026-20715 exploited in the wild?: No. Junglewise Threat Intelligence has no report of CVE-2026-20715 being exploited in the wild.
How severe is CVE-2026-20715?: Informational severity, with a CVSS score of 8.2, published 11 August 2026.
Which products and versions are affected?: Intel Active Management Technology (AMT) Multiple generations across Kaby Lake through Sapphire Rapids; Intel Standard Manageability Multiple generations across Kaby Lake through Sapphire Rapids.
Is there a fix for CVE-2026-20715?: No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.
How is CVE-2026-20715 attacked?: It is attacked over the network, in device firmware.
Am I affected by CVE-2026-20715?: Check whether you run Intel Active Management Technology (AMT) or Intel Standard Manageability at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

Technical details

The vulnerability stems from improper input validation in Intel AMT and Standard Manageability firmware, allowing an unauthenticated network adversary to craft malicious network requests that trigger denial of service conditions. The attack has low complexity and requires no special privileges or user interaction. An attacker can send crafted network packets to the management interface to exhaust resources or crash the firmware, rendering the affected system's management capabilities unavailable. Intel has released firmware updates across multiple processor generations and chipsets to address this issue, with specific patch versions varying by platform (e.g., 14.1.80 for Comet Lake, 15.0.56 for Tiger Lake and newer).

Affected products

Intel Active Management Technology (AMT) Multiple generations across Kaby Lake through Sapphire Rapids
Intel Standard Manageability Multiple generations across Kaby Lake through Sapphire Rapids

Timeline

2026-08-11: disclosed: Intel security advisory INTEL-SA-01427 released

References

https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01427.html

This page as Markdown. Free to reuse under CC BY 4.0 with a link back.