Vulnerability · Published Oct 29, 2026 · Assigned by Kaspersky
CVE-2026-88941
Medium 5.2
In plain English
A medium-severity missing authentication in Administration Server from Kaspersky. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.1% (higher than 4% of all known vulnerabilities).
Severity (CVSS 3.1)5.2Medium
Exploit odds (30 days)0.1%top 96.3% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known
Official description
Kaspersky has fixed a vulnerability in the Network Agent for Windows module of Kaspersky Security Center. The vulnerability could potentially cause the Network Agent module of Kaspersky Security Center to malfunction. There are no evidence of the vulnerability exploitation in-the-wild.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| Kaspersky | Network Agent | 16.3.0.120716.2.0.147716.2.0.102316.2.0.91716.1.0.651716.0.0.25415.4.0.895215.3.0.392 |
| Kaspersky | Administration Server | 15.1.0.2223915.1.0.20748 |
Weakness: CWE-306 · Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:L/A:L
References
- Advisory issued on October 29, 2026 vendor-advisory