CVE-2026-88941 (GCVE-0-2026-88941)
Vulnerability from cvelistv5 – Published: 2026-10-29 09:11 – Updated: 2026-10-29 16:54
VLAI
EPSS
VEX
Summary
Kaspersky has fixed a vulnerability in the Network Agent for Windows module of Kaspersky Security Center. The vulnerability could potentially cause the Network Agent module of Kaspersky Security Center to malfunction. There are no evidence of the vulnerability exploitation in-the-wild.
Severity
5.2 (Medium)
SSVC
Exploitation: none
Automatable: no
Technical Impact: partial
CISA Coordinator · CISA-ADP (v2.0.3)
Decision recorded 2026-10-29 12:23 UTC
CWE
- CWE-306 - Missing Authentication for Critical Function
Assigner
References
1 reference
| URL | Tags |
|---|---|
| https://support.kaspersky.com/vulnerability/list-… | vendor-advisory |
Impacted products
2 products
| Vendor | Product | Version | CPE status | |
|---|---|---|---|---|
| Kaspersky | Network Agent |
Affected:
16.3.0.1207
Affected: 16.2.0.1477 Affected: 16.2.0.1023 Affected: 16.2.0.917 Affected: 16.1.0.6517 Affected: 16.0.0.254 Affected: 15.4.0.8952 Affected: 15.3.0.392 Affected: 15.2.0.442 Affected: 15.1.0.20748 Affected: 15.1.0.11795 Affected: 14.0.0.20023 Affected: 10.5.1781 |
guessed | |
| Kaspersky | Administration Server |
Affected:
15.1.0.22239
Affected: 15.1.0.20748 |
guessed |
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2026-88941",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-10-29T12:23:11.998474Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2026-10-29T12:36:54.040Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"defaultStatus": "unaffected",
"platforms": [
"Windows"
],
"product": "Network Agent",
"vendor": "Kaspersky",
"versions": [
{
"status": "affected",
"version": "16.3.0.1207"
},
{
"status": "affected",
"version": "16.2.0.1477"
},
{
"status": "affected",
"version": "16.2.0.1023"
},
{
"status": "affected",
"version": "16.2.0.917"
},
{
"status": "affected",
"version": "16.1.0.6517"
},
{
"status": "affected",
"version": "16.0.0.254"
},
{
"status": "affected",
"version": "15.4.0.8952"
},
{
"status": "affected",
"version": "15.3.0.392"
},
{
"status": "affected",
"version": "15.2.0.442"
},
{
"status": "affected",
"version": "15.1.0.20748"
},
{
"status": "affected",
"version": "15.1.0.11795"
},
{
"status": "affected",
"version": "14.0.0.20023"
},
{
"status": "affected",
"version": "10.5.1781"
}
]
},
{
"defaultStatus": "unaffected",
"platforms": [
"Windows"
],
"product": "Administration Server",
"vendor": "Kaspersky",
"versions": [
{
"status": "affected",
"version": "15.1.0.22239"
},
{
"status": "affected",
"version": "15.1.0.20748"
}
]
}
],
"credits": [
{
"lang": "en",
"type": "finder",
"value": "Nguyen Duc Anh of Noventiq"
}
],
"descriptions": [
{
"lang": "en",
"value": "Kaspersky has fixed a vulnerability in the Network Agent for Windows module of Kaspersky Security Center. The vulnerability could potentially cause the Network Agent module of Kaspersky Security Center to malfunction. There are no evidence of the vulnerability exploitation in-the-wild."
}
],
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"availabilityImpact": "LOW",
"baseScore": 5.2,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "LOW",
"privilegesRequired": "LOW",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:L/A:L",
"version": "3.1"
},
"cvssV4_0": {
"baseScore": 6.2,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:N/SC:N/SI:H/SA:H",
"version": "4.0"
},
"format": "CVSS",
"scenarios": [
{
"lang": "en",
"value": "GENERAL"
}
]
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-306",
"description": "CWE-306: Missing Authentication for Critical Function",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-10-29T16:54:19.568Z",
"orgId": "e45d732a-8f6b-4b6b-be76-7420f6a2b988",
"shortName": "Kaspersky"
},
"references": [
{
"name": "Advisory issued on October 29, 2026",
"tags": [
"vendor-advisory"
],
"url": "https://support.kaspersky.com/vulnerability/list-of-advisories/12430#291026"
}
],
"solutions": [
{
"lang": "en",
"value": "Users of Kaspersky Security Center for Linux should install the Network Agent for Windows module, version 17.0.0.3992, from the Kaspersky Security Center 17 distribution package."
},
{
"lang": "en",
"value": "Users of Kaspersky Security Center for Windows should install the Administration Server module (version 15.1.0.28509) from the Kaspersky Security Center 15.1 Update 3 for Windows distribution package, and then install the Network Agent for Windows module (version 17.0.0.3992)."
},
{
"lang": "en",
"value": "Users running Network Agent on Windows XP should install the updated Network Agent for Windows XP SP3 module version 14.0.0.20145 or the Network Agent for Windows XP SP2 module version 10.5.0.1781 (the build number has not changed)."
},
{
"lang": "en",
"value": "Users of Kaspersky Next Expert View (Kaspersky Next) should install the updated Network Agent for Windows module version 16.2.0.1547 from the list of current versions of Kaspersky applications."
},
{
"lang": "en",
"value": "Users of Kaspersky Next Expert View (Kaspersky Next) who use Network Agent on Windows XP should install the updated Network Agent for Windows XP SP3 module version 14.0.0.20145 from the list of current versions of Kaspersky applications."
},
{
"lang": "en",
"value": "Users of Kaspersky Endpoint Security for Virtualization 5.2 Light Agent should install the updated Administration Server for Windows and Network Agent for Windows modules."
},
{
"lang": "en",
"value": "Users of Kaspersky Endpoint Security Cloud (also referred to as Kaspersky Next Pro View) should install the Network Agent for Windows module version 15.1.0.22268."
},
{
"lang": "en",
"value": "Users of Kaspersky Vulnerability Management should update the solution to version 1.1."
}
],
"timeline": [
{
"lang": "en",
"time": "2026-10-28T00:00:00.000Z",
"value": "Advisory published by Kaspersky"
}
]
}
},
"cveMetadata": {
"assignerOrgId": "e45d732a-8f6b-4b6b-be76-7420f6a2b988",
"assignerShortName": "Kaspersky",
"cveId": "CVE-2026-88941",
"datePublished": "2026-10-29T09:11:33.069Z",
"dateReserved": "2026-09-10T14:58:04.793Z",
"dateUpdated": "2026-10-29T16:54:19.568Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2",
"vulnerability-lookup:meta": {
"epss": {
"cve": "CVE-2026-88941",
"date": "2026-10-30",
"epss": "0.00144",
"percentile": "0.03663"
},
"nvd": {
"cve": {
"affected": [
{
"affectedData": [
{
"defaultStatus": "unaffected",
"platforms": [
"Windows"
],
"product": "Network Agent",
"vendor": "Kaspersky",
"versions": [
{
"status": "affected",
"version": "16.3.0.1207"
},
{
"status": "affected",
"version": "16.2.0.1477"
},
{
"status": "affected",
"version": "16.2.0.1023"
},
{
"status": "affected",
"version": "16.2.0.917"
},
{
"status": "affected",
"version": "16.1.0.6517"
},
{
"status": "affected",
"version": "16.0.0.254"
},
{
"status": "affected",
"version": "15.4.0.8952"
},
{
"status": "affected",
"version": "15.3.0.392"
},
{
"status": "affected",
"version": "15.2.0.442"
},
{
"status": "affected",
"version": "15.1.0.20748"
},
{
"status": "affected",
"version": "15.1.0.11795"
},
{
"status": "affected",
"version": "14.0.0.20023"
},
{
"status": "affected",
"version": "10.5.1781"
}
]
},
{
"defaultStatus": "unaffected",
"platforms": [
"Windows"
],
"product": "Administration Server",
"vendor": "Kaspersky",
"versions": [
{
"status": "affected",
"version": "15.1.0.22239"
},
{
"status": "affected",
"version": "15.1.0.20748"
}
]
}
],
"source": "vulnerability@kaspersky.com"
}
],
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "Kaspersky has fixed a vulnerability in the Network Agent for Windows module of Kaspersky Security Center. The vulnerability could potentially cause the Network Agent module of Kaspersky Security Center to malfunction. There are no evidence of the vulnerability exploitation in-the-wild."
}
],
"id": "CVE-2026-88941",
"lastModified": "2026-10-29T16:19:37.750",
"metrics": {
"cvssMetricV31": [
{
"cvssData": {
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"availabilityImpact": "LOW",
"baseScore": 5.2,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "LOW",
"privilegesRequired": "LOW",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:L/A:L",
"version": "3.1"
},
"exploitabilityScore": 2.0,
"impactScore": 2.7,
"source": "vulnerability@kaspersky.com",
"type": "Secondary"
}
],
"cvssMetricV40": [
{
"cvssData": {
"Automatable": "NOT_DEFINED",
"Recovery": "NOT_DEFINED",
"Safety": "NOT_DEFINED",
"attackComplexity": "LOW",
"attackRequirements": "NONE",
"attackVector": "LOCAL",
"availabilityRequirement": "NOT_DEFINED",
"baseScore": 6.2,
"baseSeverity": "MEDIUM",
"confidentialityRequirement": "NOT_DEFINED",
"exploitMaturity": "NOT_DEFINED",
"integrityRequirement": "NOT_DEFINED",
"modifiedAttackComplexity": "NOT_DEFINED",
"modifiedAttackRequirements": "NOT_DEFINED",
"modifiedAttackVector": "NOT_DEFINED",
"modifiedPrivilegesRequired": "NOT_DEFINED",
"modifiedSubAvailabilityImpact": "NOT_DEFINED",
"modifiedSubConfidentialityImpact": "NOT_DEFINED",
"modifiedSubIntegrityImpact": "NOT_DEFINED",
"modifiedUserInteraction": "NOT_DEFINED",
"modifiedVulnAvailabilityImpact": "NOT_DEFINED",
"modifiedVulnConfidentialityImpact": "NOT_DEFINED",
"modifiedVulnIntegrityImpact": "NOT_DEFINED",
"privilegesRequired": "LOW",
"providerUrgency": "NOT_DEFINED",
"subAvailabilityImpact": "HIGH",
"subConfidentialityImpact": "NONE",
"subIntegrityImpact": "HIGH",
"userInteraction": "NONE",
"valueDensity": "NOT_DEFINED",
"vectorString": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:N/SC:N/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
"version": "4.0",
"vulnAvailabilityImpact": "NONE",
"vulnConfidentialityImpact": "LOW",
"vulnIntegrityImpact": "LOW",
"vulnerabilityResponseEffort": "NOT_DEFINED"
},
"source": "vulnerability@kaspersky.com",
"type": "Secondary"
}
],
"ssvcV203": [
{
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"ssvcData": {
"id": "CVE-2026-88941",
"options": [
{
"exploitation": "none"
},
{
"automatable": "no"
},
{
"technicalImpact": "partial"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-10-29T12:23:11.998474Z",
"version": "2.0.3"
}
}
]
},
"published": "2026-10-29T10:17:06.520",
"references": [
{
"source": "vulnerability@kaspersky.com",
"url": "https://support.kaspersky.com/vulnerability/list-of-advisories/12430#291026"
}
],
"sourceIdentifier": "vulnerability@kaspersky.com",
"vulnStatus": "Awaiting Analysis",
"weaknesses": [
{
"description": [
{
"lang": "en",
"value": "CWE-306"
}
],
"source": "vulnerability@kaspersky.com",
"type": "Secondary"
}
]
}
},
"vulnrichment": {
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2026-88941",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-10-29T12:23:11.998474Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2026-10-29T12:30:34.220Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"defaultStatus": "unaffected",
"platforms": [
"Windows"
],
"product": "Network Agent",
"vendor": "Kaspersky",
"versions": [
{
"status": "affected",
"version": "16.3.0.1207"
},
{
"status": "affected",
"version": "16.2.0.1477"
},
{
"status": "affected",
"version": "16.2.0.1023"
},
{
"status": "affected",
"version": "16.2.0.917"
},
{
"status": "affected",
"version": "16.1.0.6517"
},
{
"status": "affected",
"version": "16.0.0.254"
},
{
"status": "affected",
"version": "15.4.0.8952"
},
{
"status": "affected",
"version": "15.3.0.392"
},
{
"status": "affected",
"version": "15.2.0.442"
},
{
"status": "affected",
"version": "15.1.0.20748"
},
{
"status": "affected",
"version": "15.1.0.11795"
},
{
"status": "affected",
"version": "14.0.0.20023"
},
{
"status": "affected",
"version": "10.5.1781"
}
]
},
{
"defaultStatus": "unaffected",
"platforms": [
"Windows"
],
"product": "Administration Server",
"vendor": "Kaspersky",
"versions": [
{
"status": "affected",
"version": "15.1.0.22239"
},
{
"status": "affected",
"version": "15.1.0.20748"
}
]
}
],
"credits": [
{
"lang": "en",
"type": "finder",
"value": "Nguyen Duc Anh of Noventiq"
}
],
"descriptions": [
{
"lang": "en",
"value": "Kaspersky has fixed a vulnerability in the Network Agent for Windows module of Kaspersky Security Center. The vulnerability could potentially cause the Network Agent module of Kaspersky Security Center to malfunction. There are no evidence of the vulnerability exploitation in-the-wild."
}
],
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"availabilityImpact": "LOW",
"baseScore": 5.2,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "LOW",
"privilegesRequired": "LOW",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:L/A:L",
"version": "3.1"
},
"cvssV4_0": {
"baseScore": 6.2,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:N/SC:N/SI:H/SA:H",
"version": "4.0"
},
"format": "CVSS",
"scenarios": [
{
"lang": "en",
"value": "GENERAL"
}
]
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-306",
"description": "CWE-306: Missing Authentication for Critical Function",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-10-29T16:54:19.568Z",
"orgId": "e45d732a-8f6b-4b6b-be76-7420f6a2b988",
"shortName": "Kaspersky"
},
"references": [
{
"name": "Advisory issued on October 29, 2026",
"tags": [
"vendor-advisory"
],
"url": "https://support.kaspersky.com/vulnerability/list-of-advisories/12430#291026"
}
],
"solutions": [
{
"lang": "en",
"value": "Users of Kaspersky Security Center for Linux should install the Network Agent for Windows module, version 17.0.0.3992, from the Kaspersky Security Center 17 distribution package."
},
{
"lang": "en",
"value": "Users of Kaspersky Security Center for Windows should install the Administration Server module (version 15.1.0.28509) from the Kaspersky Security Center 15.1 Update 3 for Windows distribution package, and then install the Network Agent for Windows module (version 17.0.0.3992)."
},
{
"lang": "en",
"value": "Users running Network Agent on Windows XP should install the updated Network Agent for Windows XP SP3 module version 14.0.0.20145 or the Network Agent for Windows XP SP2 module version 10.5.0.1781 (the build number has not changed)."
},
{
"lang": "en",
"value": "Users of Kaspersky Next Expert View (Kaspersky Next) should install the updated Network Agent for Windows module version 16.2.0.1547 from the list of current versions of Kaspersky applications."
},
{
"lang": "en",
"value": "Users of Kaspersky Next Expert View (Kaspersky Next) who use Network Agent on Windows XP should install the updated Network Agent for Windows XP SP3 module version 14.0.0.20145 from the list of current versions of Kaspersky applications."
},
{
"lang": "en",
"value": "Users of Kaspersky Endpoint Security for Virtualization 5.2 Light Agent should install the updated Administration Server for Windows and Network Agent for Windows modules."
},
{
"lang": "en",
"value": "Users of Kaspersky Endpoint Security Cloud (also referred to as Kaspersky Next Pro View) should install the Network Agent for Windows module version 15.1.0.22268."
},
{
"lang": "en",
"value": "Users of Kaspersky Vulnerability Management should update the solution to version 1.1."
}
],
"timeline": [
{
"lang": "en",
"time": "2026-10-28T00:00:00.000Z",
"value": "Advisory published by Kaspersky"
}
]
}
},
"cveMetadata": {
"assignerOrgId": "e45d732a-8f6b-4b6b-be76-7420f6a2b988",
"assignerShortName": "Kaspersky",
"cveId": "CVE-2026-88941",
"datePublished": "2026-10-29T09:11:33.069Z",
"dateReserved": "2026-09-10T14:58:04.793Z",
"dateUpdated": "2026-10-29T16:54:19.568Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
}
}
Loading…
Loading…
Drag nodes to arrange them. Double-click a related vulnerability to open it, or a source to visit its link. The Physics button on the left tunes the layout and the simulation; the legend at the bottom left hides or shows nodes by kind and by sighting type.
Experimental. This forecast is provided for visualization only and may change without notice. Do not use it for operational decisions.
Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.
Sightings
| Author | Source | Type | Date | Other |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or observed by the user.
- Confirmed: The vulnerability has been validated from an analyst's perspective.
- Published Proof of Concept: A public proof of concept is available for this vulnerability.
- Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
- Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
- Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
- Not confirmed: The user expressed doubt about the validity of the vulnerability.
- Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.
Vulnerability timeline
Sightings and recorded dates, grouped by day · UTC
Loading timeline…
Loading…
Loading…
The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the
vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base
model, served locally by ML-Gateway.
They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.
Loading…
Related by attack behaviour
Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.