CVE-2026-55716

Out-of-bounds read in the CheckUefiVgaMode for the Intel(R) Server Board D50DNP and Intel(R) Server Board M50FCP within Ring 0 UEFI may allow an information disclosure. Startup code and smm adversary with a privileged user combined with a high complexity attack may enable data exposure. This result may potentially occur via local access when attack requirements are present without special internal knowledge and requires no user interaction. The potential vulnerability may impact the confidentiality (high), integrity (none) and availability (none) of the vulnerable system, resulting in subsequent system confidentiality (none), integrity (none) and availability (none) impacts.

• CWE-125

• https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01554.html

Published

Nov 10, 2026

Last Modified

Nov 10, 2026

Status

Awaiting Analysis

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-55704Discourse is an open-source discussion platform. Prior o 202…4.3
• CVE-2026-55706sppp_pap_input in sys/net/if_spppsubr.c in OpenBSD before 07…8.3
• CVE-2026-55707In OpenStack Neutron before 28.0.2, the subnetpool onboardin…7.1
• CVE-2026-55708In NLnet Labs Unbound 1.6.0 up to and including 1.25.1, the …3.1
• CVE-2026-55709Loop with unreachable exit condition ('infinite loop') in th…6.9
• CVE-2026-5571A vulnerability was identified in Technostrobe HI-LED-WR120-…7.5
• CVE-2026-55717In NLnet Labs Unbound 1.10.0 up to and including 1.25.1, whe…5.9
• CVE-2026-5572A security flaw has been discovered in Technostrobe HI-LED-W…4.3
• CVE-2026-55721Storage Concentrator (SC & SCVM) is vulnerable to SQL inject…9.3
• CVE-2026-55723When NGINX Ingress Controller is configured with Custom Reso…8.3
• CVE-2026-55726The Azure Blob Storage container used for Gardyn device logs…6.9
• CVE-2026-55727A flaw in the authentication mechanism for video stream requ…7.5