---
id: "CVE-2026-57882"
page: "https://infrastack.ai/live/CVE-2026-57882"
kind: "vulnerability"
aliases: ["CVE-2026-57882"]
title: "Intel server boards: UEFI firmware write flaw allows privilege escalation locally"
severity: "high"
cvss: 8.7
epss: null
exploited: false
status: "open"
category: "infrastructure"
products: [{"name": "Intel Server Board D50DNP and M50FCP UEFI", "fixed": ["R01.02.0006"], "affected": "< R01.02.0006", "ecosystem": "vendor"}]
ecosystems: []
tags: ["bios", "d50dnp", "infrastructure", "intel", "m50fcp", "server-firmware", "uefi"]
not_affected_if: ["no-local-access", "other-server-boards"]
published_at: "2026-11-10T18:17:41+00:00"
first_seen_at: "2026-11-10T18:22:59+00:00"
updated_at: "2026-11-10T18:26:47+00:00"
sources: [{"source": "nvd", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-57882", "first_seen_at": "2026-11-10T18:22:59+00:00"}, {"source": "analyst", "url": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01554.html", "first_seen_at": "2026-11-10T18:26:47+00:00", "cites": ["https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01554.html"]}]
exploit_sources: []
---

# Intel server boards: UEFI firmware write flaw allows privilege escalation locally

Link for people: https://infrastack.ai/live/CVE-2026-57882 (this .md is for agents)

An out-of-bounds write in the XmlCliCommonDxe firmware component of Intel Server Boards D50DNP and M50FCP lets a privileged local user run code at firmware level. An attacker who gets that access can take full control of confidentiality, integrity and availability of the machine.

_Summary, check and fix written by a model from the sources; labelled as such._

## Affected

- vendor:Intel Server Board D50DNP and M50FCP UEFI affected < R01.02.0006 fixed R01.02.0006

## How to check

Identify servers with Intel Server Board D50DNP or M50FCP (board model in BIOS/inventory). Read the installed UEFI/BIOS version; versions before R01.02.0006 are affected.

## Fix

Update Intel Server Board D50DNP and M50FCP UEFI to version R01.02.0006 or later (Intel download pages linked from INTEL-SA-01554).

## Timeline

- 2026-11-10T18:22:59+00:00 nvd https://nvd.nist.gov/vuln/detail/CVE-2026-57882
- 2026-11-10T18:26:47+00:00 analyst https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01554.html — Read Intel INTEL-SA-01554 (11/10/2026): CVE listed, affected UEFI before R01.02.0006, fixed R01.02.0006. No exploitation/PoC info; no social search done (local, privileged, firmware).

## Documents

- [advisory] INTEL-SA-01554 Intel Server Board D50DNP and M50FCP UEFI Firmware Advisory https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01554.html

## From the sources

Out-of-bounds write in the XmlCliCommonDxe for the Intel(R) Server Board D50DNP and Intel(R) Server Board M50FCP within Ring 0 UEFI may allow an escalation of privilege. Startup code and smm adversary with a privileged user combined with a high complexity attack may enable local code execution. This result may potentially occur via local access when attack requirements are present without special internal knowledge and requires no user interaction. The potential vulnerability may impact the confidentiality (high), integrity (high) and availability (high) of the vulnerable system, resulting in subsequent system confidentiality (high), integrity (high) and availability (high) impacts.

---

_Free to read, with fair use of about 60 pages a minute. For higher limits or API access: sales@infrastack.ai_