CVE-2026-88941

Kaspersky has fixed a vulnerability in the Network Agent for Windows module of Kaspersky Security Center. The vulnerability could potentially cause the Network Agent module of Kaspersky Security Center to malfunction. There are no evidence of the vulnerability exploitation in-the-wild.

CVSS v3 5.2 MEDIUM

5.2^/10

CVSS v3 : MEDIUM

Vector :

Exploitability : 2.0 / Impact : 2.7

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact LOW

Availability Impact LOW

Scope CHANGED

References

Link	Resource
https://support.kaspersky.com/vulnerability/list-of-advisories/12430#291026

Configurations

No configuration.

History

29 Oct 2026, 10:17

Type	Values Removed	Values Added
New CVE

Information

Published : 2026-10-29 10:17

Updated : 2026-10-29 16:19

NVD link : CVE-2026-88941

Mitre link : CVE-2026-88941

CVE.ORG link : CVE-2026-88941

JSON object : View

Products Affected

No product.

CWE

CWE-306

Missing Authentication for Critical Function

{"id": "CVE-2026-88941", "cveTags": [], "metrics": {"ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2026-88941", "role": "CISA Coordinator", "options": [{"exploitation": "none"}, {"automatable": "no"}, {"technicalImpact": "partial"}], "version": "2.0.3", "timestamp": "2026-10-29T12:23:11.998474Z"}}], "cvssMetricV31": [{"type": "Secondary", "source": "vulnerability@kaspersky.com", "cvssData": {"scope": "CHANGED", "version": "3.1", "baseScore": 5.2, "attackVector": "LOCAL", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:L/A:L", "integrityImpact": "LOW", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "LOW", "privilegesRequired": "LOW", "confidentialityImpact": "NONE"}, "impactScore": 2.7, "exploitabilityScore": 2.0}], "cvssMetricV40": [{"type": "Secondary", "source": "vulnerability@kaspersky.com", "cvssData": {"Safety": "NOT_DEFINED", "version": "4.0", "Recovery": "NOT_DEFINED", "baseScore": 6.2, "Automatable": "NOT_DEFINED", "attackVector": "LOCAL", "baseSeverity": "MEDIUM", "valueDensity": "NOT_DEFINED", "vectorString": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:N/SC:N/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "exploitMaturity": "NOT_DEFINED", "providerUrgency": "NOT_DEFINED", "userInteraction": "NONE", "attackComplexity": "LOW", "attackRequirements": "NONE", "privilegesRequired": "LOW", "subIntegrityImpact": "HIGH", "vulnIntegrityImpact": "LOW", "integrityRequirement": "NOT_DEFINED", "modifiedAttackVector": "NOT_DEFINED", "subAvailabilityImpact": "HIGH", "vulnAvailabilityImpact": "NONE", "availabilityRequirement": "NOT_DEFINED", "modifiedUserInteraction": "NOT_DEFINED", "modifiedAttackComplexity": "NOT_DEFINED", "subConfidentialityImpact": "NONE", "vulnConfidentialityImpact": "LOW", "confidentialityRequirement": "NOT_DEFINED", "modifiedAttackRequirements": "NOT_DEFINED", "modifiedPrivilegesRequired": "NOT_DEFINED", "modifiedSubIntegrityImpact": "NOT_DEFINED", "modifiedVulnIntegrityImpact": "NOT_DEFINED", "vulnerabilityResponseEffort": "NOT_DEFINED", "modifiedSubAvailabilityImpact": "NOT_DEFINED", "modifiedVulnAvailabilityImpact": "NOT_DEFINED", "modifiedSubConfidentialityImpact": "NOT_DEFINED", "modifiedVulnConfidentialityImpact": "NOT_DEFINED"}}]}, "affected": [{"source": "vulnerability@kaspersky.com", "affectedData": [{"vendor": "Kaspersky", "product": "Network Agent", "versions": [{"status": "affected", "version": "16.3.0.1207"}, {"status": "affected", "version": "16.2.0.1477"}, {"status": "affected", "version": "16.2.0.1023"}, {"status": "affected", "version": "16.2.0.917"}, {"status": "affected", "version": "16.1.0.6517"}, {"status": "affected", "version": "16.0.0.254"}, {"status": "affected", "version": "15.4.0.8952"}, {"status": "affected", "version": "15.3.0.392"}, {"status": "affected", "version": "15.2.0.442"}, {"status": "affected", "version": "15.1.0.20748"}, {"status": "affected", "version": "15.1.0.11795"}, {"status": "affected", "version": "14.0.0.20023"}, {"status": "affected", "version": "10.5.1781"}], "platforms": ["Windows"], "defaultStatus": "unaffected"}, {"vendor": "Kaspersky", "product": "Administration Server", "versions": [{"status": "affected", "version": "15.1.0.22239"}, {"status": "affected", "version": "15.1.0.20748"}], "platforms": ["Windows"], "defaultStatus": "unaffected"}]}], "published": "2026-10-29T10:17:06.520", "references": [{"url": "https://support.kaspersky.com/vulnerability/list-of-advisories/12430#291026", "source": "vulnerability@kaspersky.com"}], "vulnStatus": "Awaiting Analysis", "weaknesses": [{"type": "Secondary", "source": "vulnerability@kaspersky.com", "description": [{"lang": "en", "value": "CWE-306"}]}], "descriptions": [{"lang": "en", "value": "Kaspersky has fixed a vulnerability in the Network Agent for Windows module of Kaspersky Security Center. The vulnerability could potentially cause the Network Agent module of Kaspersky Security Center to malfunction. There are no evidence of the vulnerability exploitation in-the-wild."}], "lastModified": "2026-10-29T16:19:37.750", "sourceIdentifier": "vulnerability@kaspersky.com"}