Is CVE-2026-57882 exploited in the wild?

No. Junglewise Threat Intelligence has no report of CVE-2026-57882 being exploited in the wild.

How severe is CVE-2026-57882?

Informational severity, published 10 November 2026.

Which products and versions are affected?

Intel Server Board D50DNP UEFI Firmware before R01.02.0006; Intel Server Board M50FCP UEFI Firmware before R01.02.0006.

Is there a fix for CVE-2026-57882?

Yes: fixed in Server Board D50DNP and M50FCP UEFI R01.02.0006 or later. Junglewise finds every place you run it, drafts the upgrade and applies it once you approve.

How is CVE-2026-57882 attacked?

It is attacked with local access, in device firmware.

Am I affected by CVE-2026-57882?

Check whether you run Intel Server Board D50DNP UEFI Firmware or Intel Server Board M50FCP UEFI Firmware at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

CVE-2026-57882: Intel Server Board D50DNP and M50FCP out-of-bounds write in XmlCliCommonDxe

CVE-2026-57882 · Severity: info · Published 2026-11-10

Intel Server Boards D50DNP and M50FCP contain a firmware vulnerability in their UEFI code that could allow a privileged attacker to execute arbitrary code at the highest privilege level. An attacker with local access and administrator credentials could exploit this to gain complete control of the system, compromising all data and system operations. This vulnerability requires high technical complexity to exploit and is not known to be actively exploited.

Technologies: Intel Server Board D50DNP UEFI Firmware, Intel Server Board M50FCP UEFI Firmware. Vendors: Intel.

Quick answers

Is CVE-2026-57882 exploited in the wild?: No. Junglewise Threat Intelligence has no report of CVE-2026-57882 being exploited in the wild.
How severe is CVE-2026-57882?: Informational severity, published 10 November 2026.
Which products and versions are affected?: Intel Server Board D50DNP UEFI Firmware before R01.02.0006; Intel Server Board M50FCP UEFI Firmware before R01.02.0006.
Is there a fix for CVE-2026-57882?: Yes: fixed in Server Board D50DNP and M50FCP UEFI R01.02.0006 or later. Junglewise finds every place you run it, drafts the upgrade and applies it once you approve.
How is CVE-2026-57882 attacked?: It is attacked with local access, in device firmware.
Am I affected by CVE-2026-57882?: Check whether you run Intel Server Board D50DNP UEFI Firmware or Intel Server Board M50FCP UEFI Firmware at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

How to fix

Fixed in: Server Board D50DNP and M50FCP UEFI R01.02.0006 or later

Technical details

Out-of-bounds write vulnerability in the XmlCliCommonDxe component of Ring 0 UEFI firmware on Intel Server Boards D50DNP and M50FCP. The vulnerability requires local access and high administrative privileges combined with a complex attack; it enables privilege escalation and local code execution with impact to confidentiality, integrity, and availability. A firmware update to UEFI version R01.02.0006 or later fixes the issue.

Affected products

Intel Server Board D50DNP UEFI Firmware before R01.02.0006
Intel Server Board M50FCP UEFI Firmware before R01.02.0006

Timeline

2026-11-10: disclosed

References

https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01554.html

This page as Markdown. Free to reuse under CC BY 4.0 with a link back.