CVE-2026-32791

Untrusted search path for some Intel(R) Performance Counter Monitor (Intel(R) PCM) before version tag 202604 within Ring 3: User Applications may allow an escalation of privilege. Unprivileged software adversary with an authenticated user combined with a high complexity attack may enable escalation of privilege. This result may potentially occur via local access when attack requirements are not present without special internal knowledge and requires passive user interaction. The potential vulnerability may impact the confidentiality (high), integrity (high) and availability (high) of the vulnerable system, resulting in subsequent system confidentiality (none), integrity (none) and availability (none) impacts.

• CWE-426
• CWE-426

• https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01488.html

Published

Aug 11, 2026

Last Modified

Aug 12, 2026

Status

Awaiting Analysis

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-32776libexpat before 2.7.5 allows a NULL pointer dereference with…5.5
• CVE-2026-32777libexpat before 2.7.5 allows an infinite loop while parsing …5.5
• CVE-2026-32778libexpat before 2.7.5 allows a NULL pointer dereference in t…5.5
• CVE-2026-3278Improper neutralization of input during web page generation …6.1
• CVE-2026-32788Uncontrolled search path for some Approximate Bayesian Infer…5.4
• CVE-2026-3279The Enable jQuery Migrate Helper plugin for WordPress is vul…6.5
• CVE-2026-32792NLnet Labs Unbound 1.6.2 up to and including version 1.25.0 …5.3
• CVE-2026-32794Improper Certificate Validation vulnerability in Apache Airf…4.8
• CVE-2026-32803Dell PowerScale OneFS versions 9.5.0.0 through 9.5.1.6, 9.6.…3.3
• CVE-2026-32804Dell PowerFlex Manager, version(s) prior to 5.1.0.1, contain…8.1
• CVE-2026-32805Romeo gives the capability to reach high code coverage of Go…7.5
• CVE-2026-32806dataCycle is a data management system for centrally storing,…7.5