---
id: "CVE-2026-56435"
page: "https://infrastack.ai/live/CVE-2026-56435"
kind: "vulnerability"
aliases: ["CVE-2026-56435"]
title: "Intel server boards: UEFI firmware flaw lets a local user escalate privileges"
severity: "high"
cvss: 8.7
epss: null
exploited: false
status: "open"
category: "infrastructure"
products: [{"name": "Intel Server Board D50DNP UEFI", "fixed": ["R01.02.0006"], "affected": "< R01.02.0006", "ecosystem": "vendor"}, {"name": "Intel Server Board M50FCP UEFI", "fixed": ["R01.02.0006"], "affected": "< R01.02.0006", "ecosystem": "vendor"}]
ecosystems: []
tags: ["bios", "infrastructure", "intel", "server-firmware", "uefi"]
not_affected_if: ["no-local-access", "other-server-boards"]
published_at: "2026-11-10T18:17:41+00:00"
first_seen_at: "2026-11-10T18:22:59+00:00"
updated_at: "2026-11-10T18:27:03+00:00"
sources: [{"source": "nvd", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-56435", "first_seen_at": "2026-11-10T18:22:59+00:00"}, {"source": "analyst", "url": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01554.html", "first_seen_at": "2026-11-10T18:27:03+00:00", "cites": ["https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01554.html"]}]
exploit_sources: []
---

# Intel server boards: UEFI firmware flaw lets a local user escalate privileges

Link for people: https://infrastack.ai/live/CVE-2026-56435 (this .md is for agents)

An out-of-bounds write in the XmlCliCommonDxe firmware component of Intel Server Board D50DNP and M50FCP lets a privileged local user run code at the firmware level. A successful attack can give full control of the machine and its data.

_Summary, check and fix written by a model from the sources; labelled as such._

## Affected

- vendor:Intel Server Board D50DNP UEFI affected < R01.02.0006 fixed R01.02.0006
- vendor:Intel Server Board M50FCP UEFI affected < R01.02.0006 fixed R01.02.0006

## How to check

- Identify whether the server uses an Intel Server Board D50DNP or M50FCP (board model in the BMC or asset inventory).
- Read the installed UEFI/BIOS version (BMC firmware inventory or setup screen). Versions before R01.02.0006 are affected; R01.02.0006 or later is fixed.

## Fix

Update Intel Server Board D50DNP and M50FCP to UEFI version R01.02.0006 or later (Intel INTEL-SA-01554).

## Timeline

- 2026-11-10T18:22:59+00:00 nvd https://nvd.nist.gov/vuln/detail/CVE-2026-56435
- 2026-11-10T18:27:03+00:00 analyst https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01554.html — Intel INTEL-SA-01554 (11/10/2026) read: affected UEFI before R01.02.0006 on D50DNP and M50FCP, fix R01.02.0006 or later. Also covers CVE-2026-57882, -57891, -55716, -50249. No exploitation or PoC stated. Download links not captured in page text.

## Documents

- [advisory] INTEL-SA-01554 Intel Server Board D50DNP and M50FCP UEFI Firmware Advisory https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01554.html

## From the sources

Out-of-bounds write in the XmlCliCommonDxe for the Intel(R) Server Board D50DNP and Intel(R) Server Board M50FCP within Ring 0 UEFI may allow an escalation of privilege. Startup code and smm adversary with a privileged user combined with a high complexity attack may enable local code execution. This result may potentially occur via local access when attack requirements are present without special internal knowledge and requires no user interaction. The potential vulnerability may impact the confidentiality (high), integrity (high) and availability (high) of the vulnerable system, resulting in subsequent system confidentiality (high), integrity (high) and availability (high) impacts.

---

_Free to read, with fair use of about 60 pages a minute. For higher limits or API access: sales@infrastack.ai_