Is CVE-2026-56435 exploited in the wild?

No. Junglewise Threat Intelligence has no report of CVE-2026-56435 being exploited in the wild.

How severe is CVE-2026-56435?

Informational severity, published 10 November 2026.

Which products and versions are affected?

Intel Server Board D50DNP UEFI Firmware before R01.02.0006; Intel Server Board M50FCP UEFI Firmware before R01.02.0006.

Is there a fix for CVE-2026-56435?

Yes: fixed in R01.02.0006 and later. Junglewise finds every place you run it, drafts the upgrade and applies it once you approve.

How is CVE-2026-56435 attacked?

It is attacked with local access, in device firmware.

Am I affected by CVE-2026-56435?

Check whether you run Intel Server Board D50DNP UEFI Firmware or Intel Server Board M50FCP UEFI Firmware at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

CVE-2026-56435: Intel Server Board D50DNP and M50FCP out-of-bounds write in XmlCliCommonDxe

CVE-2026-56435 · Severity: info · Published 2026-11-10

Intel Server Board firmware (D50DNP and M50FCP) contains an out-of-bounds write vulnerability in the UEFI XmlCliCommonDxe component that runs at the highest privilege level (Ring 0). A privileged local attacker with high complexity attack requirements could exploit this to execute arbitrary code and compromise system confidentiality, integrity, and availability. This vulnerability affects the firmware that boots and manages critical server hardware.

Technologies: Intel Server Board D50DNP UEFI Firmware, Intel Server Board M50FCP UEFI Firmware. Vendors: Intel.

Quick answers

Is CVE-2026-56435 exploited in the wild?: No. Junglewise Threat Intelligence has no report of CVE-2026-56435 being exploited in the wild.
How severe is CVE-2026-56435?: Informational severity, published 10 November 2026.
Which products and versions are affected?: Intel Server Board D50DNP UEFI Firmware before R01.02.0006; Intel Server Board M50FCP UEFI Firmware before R01.02.0006.
Is there a fix for CVE-2026-56435?: Yes: fixed in R01.02.0006 and later. Junglewise finds every place you run it, drafts the upgrade and applies it once you approve.
How is CVE-2026-56435 attacked?: It is attacked with local access, in device firmware.
Am I affected by CVE-2026-56435?: Check whether you run Intel Server Board D50DNP UEFI Firmware or Intel Server Board M50FCP UEFI Firmware at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

How to fix

Fixed in: R01.02.0006 and later

Technical details

Out-of-bounds write in the XmlCliCommonDxe UEFI component running in Ring 0. The vulnerability requires local access, a privileged user context, and high attack complexity; no user interaction is needed. Successful exploitation enables arbitrary code execution within the UEFI environment, potentially compromising the entire system. The fix is available in UEFI firmware version R01.02.0006 and later.

Affected products

Intel Server Board D50DNP UEFI Firmware before R01.02.0006
Intel Server Board M50FCP UEFI Firmware before R01.02.0006

Timeline

2026-11-10: disclosed

References

https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01554.html

This page as Markdown. Free to reuse under CC BY 4.0 with a link back.