CVE-2026-20891: Intel PROSet/Wireless WiFi Software improper authentication in Ring 2 drivers

CVE-2026-20891 · Severity: high · CVSS 7.9 · Published 2026-08-11

Intel PROSet/Wireless WiFi Software for Windows contains multiple security flaws in its Ring 2 device drivers that could allow unprivileged attackers to escalate privileges, execute arbitrary code, or crash systems without authentication or user interaction. Affected systems running vulnerable versions of this WiFi software driver are at risk of complete compromise via local or wireless network access, potentially exposing sensitive business data and disrupting operations.

Technologies: Intel Killer Wi-Fi 6 Ax1650i\/S, Intel Killer Wi-Fi 6e Ax1675i\/S, Intel Killer Wi-Fi 6e Ax1675x\/W, Intel Killer Wi-Fi 7 Be1750i\/S, Intel Killer Wi-Fi 7 Be1750x\/W, Intel Killer Wi-Fi 7 Be1775i\/S, Intel PROSet/Wireless WiFi Software, Intel Proset\, Intel Wi-Fi 6 Ax200, Intel Wi-Fi 6 Ax201, Intel Wi-Fi 6 Ax210, Intel Wi-Fi 6e Ax211, Intel Wi-Fi 7 Be200, Intel Wi-Fi 7 Be201, Intel Wi-Fi 7 Be211, Intel Wi-Fi 7 Be213, Intel Wireless Wifi, Intel Wireless-Ac 9461, Intel Wireless-Ac 9462, Intel Wireless-Ac 9560. Vendors: Intel.

Quick answers

Is CVE-2026-20891 exploited in the wild?
No. Junglewise Threat Intelligence has no report of CVE-2026-20891 being exploited in the wild.
How severe is CVE-2026-20891?
High severity, with a CVSS score of 7.9, published 11 August 2026.
Which products and versions are affected?
Intel PROSet/Wireless WiFi Software <UNKNOWN>.
Is there a fix for CVE-2026-20891?
No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.
How is CVE-2026-20891 attacked?
It is attacked with local access or from the adjacent network.
Am I affected by CVE-2026-20891?
Check whether you run Intel Killer Wi-Fi 6 Ax1650i\/S, Intel Killer Wi-Fi 6e Ax1675i\/S, Intel Killer Wi-Fi 6e Ax1675x\/W or one of the others listed at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

Technical details

The advisory documents multiple vulnerabilities in Intel PROSet/Wireless WiFi Software Ring 2 drivers including improper authentication (CVE-2026-20891, CVE-2026-20789), improper access control (CVE-2026-20741), out-of-bounds read/write conditions (CVE-2026-20749, CVE-2026-20745), improper conditions checks (CVE-2026-20776, CVE-2026-20739), and null pointer dereference (CVE-2026-20878). Attack vectors include local access (unauthenticated, no user interaction required) and adjacent/network access via wireless. These vulnerabilities enable privilege escalation to Ring 0, local code execution, and denial of service. The flaws are in kernel-mode drivers with low attack complexity. Intel has released software updates to mitigate these issues.

Affected products

  • Intel PROSet/Wireless WiFi Software <UNKNOWN>

Timeline

  • 2026-08-11: disclosed

References

This page as Markdown. Free to reuse under CC BY 4.0 with a link back.