CVE-2026-57890

{
  "etk_id": "ETK-2026-4082",
  "cve_id": "CVE-2026-57890",
  "display_id": "CVE-2026-57890",
  "ghsa_id": "GHSA-qmww-m9ph-47gp",
  "euvd_id": "EUVD-2026-121676",
  "status": "published",
  "anchor_state": "anchored",
  "title": "Exception cleanup information disclosure in MigTD SPDM responder",
  "summary": "The Ring 0 SPDM responder in Intel TDX Migration Trust Domain (MigTD) can retain information improperly when an exception is handled. An unauthenticated network attacker who can reach the responder may be able to obtain exposed data without user interaction.",
  "mitigation": "Restrict network access to the MigTD SPDM responder to trusted systems and networks until an update is available. Apply Intel's corrected release when it is published.",
  "vendor": null,
  "product": "Intel(R) TDX Migration Trust Domain (MigTD)",
  "affected": [
    {
      "affected_notes": [
        "See references"
      ],
      "affected_ranges": [],
      "ecosystem": null,
      "fixed_versions": [],
      "package_name": "Intel(R) TDX Migration Trust Domain (MigTD)",
      "purl": null
    }
  ],
  "cwes": [
    460
  ],
  "cvss_score": 8.7,
  "cvss_src": "cna_vendor",
  "cvss_vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N",
  "epss_score": null,
  "epss_percentile": null,
  "epss_asof": null,
  "automation": "contextual",
  "check": false,
  "check_confidence_basis": null,
  "exploit": false,
  "pipeline_minutes": 45.58029908333334,
  "t0_at": "2026-11-10T17:46:42.831000+00:00",
  "signals": {
    "trigger_signal": {
      "at": "2026-11-10T17:46:42.831000+00:00",
      "days": 0,
      "is_lower_bound": false,
      "measured_at": "2026-11-10T17:46:42.831000+00:00",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-57890"
    }
  }
}