CVE-2026-20709 | Intel Pentium Processor Silver default key (intel-sa-00609)

VDB-356369 · CVE-2026-20709 · INTEL-SA-00609 INTEL PENTIUM PROCESSOR SILVER DEFAULT KEY HISTORYDIFFRELATEJSONXMLCTI CVSS Meta Temp Score Current Exploit Price (≈) CTI Interest Score 5.0 $0-$5k 1.04 Summaryinfo A vulnerability classified as problematic has been found in Intel Pentium Processor Silver, Celeron Processor J and Celeron Processor N. This affects an unknown part. The manipulation leads to default key. This vulnerability is traded as CVE-2026-20709. It is possible to launch the attack on the physical device. There is no exploit available. Detailsinfo A vulnerability was found in Intel Pentium Processor Silver, Celeron Processor J and Celeron Processor N (version now known) and classified as problematic. This issue affects some unknown processing. The manipulation with an unknown input leads to a default key vulnerability. Using CWE to declare the problem leads to CWE-1394. The product uses a default cryptographic key for potentially critical functionality. Impacted is confidentiality, integrity, and availability. The summary by CVE is: Use of Default Cryptographic Key in the hardware for some Intel(R) Pentium(R) Processor Silver Series, Intel(R) Celeron(R) Processor J Series, Intel(R) Celeron(R) Processor N Series may allow an escalation of privilege. Hardware reverse engineer adversary with a privileged user combined with a high complexity attack may enable escalation of privilege. This result may potentially occur via physical access when attack requirements are present with special internal knowledge and requires no user interaction. The potential vulnerability may impact the confidentiality (high), integrity (none) and availability (none) of the vulnerable system, resulting in subsequent system confidentiality (high), integrity (high) and availability (none) impacts. The advisory is shared at intel.com. The identification of this vulnerability is CVE-2026-20709 since 01/29/2026. The exploitation is known to be difficult. An attack has to be approached locally. Additional levels of successful authentication are needed for exploitation. Neither technical details nor an exploit are publicly available. There is no information about possible countermeasures known. It may be suggested to replace the affected object with an alternative product. Productinfo Type Chip Software Vendor Intel Name Celeron Processor J Celeron Processor N Pentium Processor Silver License commercial Website Vendor: https://www.intel.com/ CPE 2.3info 🔒 🔒 🔒 CPE 2.2info 🔒 🔒 🔒 CVSSv4info VulDB Vector: 🔒 VulDB Reliability: 🔍 CNA CVSS-B Score: 🔒 CNA CVSS-BT Score: 🔒 CNA Vector: 🔒 CVSSv3info VulDB Meta Base Score: 5.1 VulDB Meta Temp Score: 5.0 VulDB Base Score: 3.6 VulDB Temp Score: 3.5 VulDB Vector: 🔒 VulDB Reliability: 🔍 CNA Base Score: 6.6 CNA Vector (intel): 🔒 CVSSv2info Vector Complexity Authentication Confidentiality Integrity Availability Unlock Unlock Unlock Unlock Unlock Unlock Unlock Unlock Unlock Unlock Unlock Unlock Unlock Unlock Unlock Unlock Unlock Unlock VulDB Base Score: 🔒 VulDB Temp Score: 🔒 VulDB Reliability: 🔍 Exploitinginfo Class: Default key CWE: CWE-1394 CAPEC: 🔒 ATT&CK: 🔒 Physical: Yes Local: Yes Remote: No Availability: 🔒 Status: Not defined Price Prediction: 🔍 Current Price Estimation: 🔒 0-Day Unlock Unlock Unlock Unlock Today Unlock Unlock Unlock Unlock Threat Intelligenceinfo Interest: 🔍 Active Actors: 🔍 Active APT Groups: 🔍 Countermeasuresinfo Recommended: no mitigation known Status: 🔍 0-Day Time: 🔒 Timelineinfo 01/29/2026 CVE reserved 04/08/2026 +68 days Advisory disclosed 04/08/2026 +0 days VulDB entry created 04/08/2026 +0 days VulDB entry last update Sourcesinfo Vendor: intel.com Advisory: intel-sa-00609 Status: Not defined CVE: CVE-2026-20709 (🔒) GCVE (CVE): GCVE-0-2026-20709 GCVE (VulDB): GCVE-100-356369 Entryinfo Created: 04/08/2026 21:10 Changes: 04/08/2026 21:10 (73) Complete: 🔍 Cache ID: 99:751:101 Discussion No comments yet. Languages: en. Please log in to comment. ◂ PreviousOverviewNext ▸