Read the docs
TI-2020-16026 Aliases CVE-2020-26200GHSA-xm85-53qc-rpxj

Improper authentication in Kaspersky Rescue Disk Version

Priority LOW 30CWE-287Published · Updated

Key facts

Attack vector
Physical
Privileges required
None
User interaction
None
Attack complexity
Low
Impact type
Security bypass
Confidentiality · integrity · availability
High · High · High
Fix status
No fix listed

Attack profile from CVSS 3.1 · NVD. Fix status from CNA. Impact type from CWE-287.

Summary

A component of Kaspersky custom boot loader allowed loading of untrusted UEFI modules due to insufficient check of their authenticity. This component is incorporated in Kaspersky Rescue Disk (KRD) and was trusted by the Authentication Agent of Full Disk Encryption in Kaspersky Endpoint Security (KES). This issue allowed to bypass the UEFI Secure Boot security feature. An attacker would need physical access to the computer to exploit it. Otherwise, local administrator privileges would be required to modify the boot loader component.

Why it matters now

EPSS 0.0025 16th percentileScored 2026-11-07
Fix No fix listed No fixed version in the sources yet

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

VendorProductAffected versionsFixed inStatusSource
N/AKaspersky Rescue Disk VersionAll versions prior to 18.0.11.3 (patch C)—No fix listedCNA
N/AKaspersky Endpoint Security with the Full Disk Encryption component installed10 SP2 MR2; 10 SP2 MR3; 11.0.0; 11.0.1; 11.1.0—No fix listedCNA
  • Kaspersky Rescue Disk Version VendorN/A Affected All versions prior to 18.0.11.3 (patch C) Fixed in — No fix listed CNA
  • Kaspersky Endpoint Security with the Full Disk Encryption component installed VendorN/A Affected 10 SP2 MR2; 10 SP2 MR3; 11.0.0; 11.0.1; 11.1.0 Fixed in — No fix listed CNA

CPE configurations NVD · 6

CPEVersionsRoleVendor
cpe:2.3:a:kaspersky:endpoint_security:10:sp2_mr2:*:*:*:*:*:*10 sp2_mr2VulnerableKaspersky
cpe:2.3:a:kaspersky:endpoint_security:10:sp2_mr3:*:*:*:*:*:*10 sp2_mr3VulnerableKaspersky
cpe:2.3:a:kaspersky:endpoint_security:11.0.0:*:*:*:*:*:*:*11.0.0VulnerableKaspersky
cpe:2.3:a:kaspersky:endpoint_security:11.0.1:*:*:*:*:*:*:*11.0.1VulnerableKaspersky
cpe:2.3:a:kaspersky:endpoint_security:11.1.0:*:*:*:*:*:*:*11.1.0VulnerableKaspersky
cpe:2.3:a:kaspersky:rescue_disk:*:*:*:*:*:*:*:*before 18.0.11.3VulnerableKaspersky
  • cpe:2.3:a:kaspersky:endpoint_security:10:sp2_mr2:*:*:*:*:*:* Versions 10 sp2_mr2 Vulnerable ·Kaspersky
  • cpe:2.3:a:kaspersky:endpoint_security:10:sp2_mr3:*:*:*:*:*:* Versions 10 sp2_mr3 Vulnerable ·Kaspersky
  • cpe:2.3:a:kaspersky:endpoint_security:11.0.0:*:*:*:*:*:*:* Versions 11.0.0 Vulnerable ·Kaspersky
  • cpe:2.3:a:kaspersky:endpoint_security:11.0.1:*:*:*:*:*:*:* Versions 11.0.1 Vulnerable ·Kaspersky
  • cpe:2.3:a:kaspersky:endpoint_security:11.1.0:*:*:*:*:*:*:* Versions 11.1.0 Vulnerable ·Kaspersky
  • cpe:2.3:a:kaspersky:rescue_disk:*:*:*:*:*:*:*:* Versions before 18.0.11.3 Vulnerable ·Kaspersky

Remediation

No fixed version listed by the sources yet.

Timeline

  1. 2026-10-02 Threatist record created from CVE-2020-26200
  2. 2026-10-03 Alias added: GHSA-xm85-53qc-rpxj

References

Advisory 1

Other 1

  • TI-2022-10539 Kaspersky Anti-Virus products for home and Kaspersky Endpoint Security with antivirus… CVSS 3.1CRITICAL 9.8
  • TI-2021-14015 Possible system denial of service in case of arbitrary changing Firefox browser… CVSS 3.1HIGH 7.5
  • TI-2021-08766 A denial-of-service issue existed in one of modules that was incorporated in Kaspersky… CVSS 3.1MEDIUM 5.5

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences