CERT-FR flags denial-of-service vulnerability CVE-2026-88941 in Kaspersky Network Agent and Security Center
CERT-FR published advisory CERTFR-2026-AVI-1417 on 29 October 2026 about a vulnerability in Kaspersky products that allows an attacker to cause a denial of service. It affects the Network Agent module on Windows and the Kaspersky Security Center Administration Server. The advisory relays Kaspersky security bulletin 12430#291026 of 29 October 2026 and references CVE-2026-88941. It does not report exploitation, threat actors or technical attack details.
Entenda a falha
A vulnerabilidade
CVE-2026-88941 is a denial-of-service flaw in Kaspersky products on Windows: the Network Agent module and the Kaspersky Security Center Administration Server. Affected Network Agent versions are those before 10.5.0.1781 (Windows XP SP2), 14.0.0.20145 (XP SP3) and 17.0.0.3992 (Windows). Also affected are Kaspersky Next Expert View Network Agent before 16.2.0.1547, Next Pro View Network Agent before 15.1.0.22268, and Security Center Administration Server before 15.1.0.28509 (Windows, Update 3). The advisory does not state the attack vector, authentication or configuration requirements, only that an attacker can cause a denial of service.
Como funciona
The articles do not describe how the vulnerable process works. They say only that the flaw lets an attacker cause a denial of service in the Network Agent and the Administration Server. The input or event that triggers it and the step where it fails have not been published in the sources available.
Por que é vulnerável
The root cause is not disclosed. Neither the CERT-FR advisory nor the story gives the type of weakness or says what the fix changes. Kaspersky's bulletin 12430#291026 is the vendor's reference for the fixes.
Como foi descoberta
The articles do not say who found the flaw or how. Kaspersky published security bulletin 12430#291026 on 29 October 2026, and CERT-FR relayed it the same day as advisory CERTFR-2026-AVI-1417. The advisory reports no exploitation and no threat actors.
Explicação gerada por IA a partir da matéria e dos artigos, em 30/10/2026 14:24.
Detalhes técnicos
- Impact: denial of service.
- CVE: CVE-2026-88941.
- Affected: Kaspersky Network Agent before 10.5.0.1781 (Windows XP SP2), before 14.0.0.20145 (Windows XP SP3) and before 17.0.0.3992 (Windows).
- Affected: Kaspersky Next Expert View Network Agent before 16.2.0.1547 (Windows).
- Affected: Kaspersky Next Pro View Network Agent before 15.1.0.22268.
- Affected: Kaspersky Security Center Administration Server before 15.1.0.28509 for Windows (Update 3).
- The advisory gives no attack vector, authentication requirements or exploitation status.
Remediação
- Apply the fixes described in Kaspersky security bulletin 12430#291026 (support.kaspersky.com/vulnerability/list-of-advisories/12430#291026).
Linha do tempo
-
CERT-FR flags denial-of-service vulnerability CVE-2026-88941 in Kaspersky Network Agent and Security Center
ler a análise desta fonte ocultar
CERT-FR published advisory CERTFR-2026-AVI-1417 on 29 October 2026 about a vulnerability in Kaspersky products that allows an attacker to cause a denial of service. It affects the Network Agent module on Windows and the Kaspersky Security Center Administration Server. The advisory relays Kaspersky security bulletin 12430#291026 of 29 October 2026 and references CVE-2026-88941. It does not report exploitation, threat actors or technical attack details.
Technical Details
- Impact: denial of service.
- CVE: CVE-2026-88941.
- Affected: Kaspersky Network Agent before 10.5.0.1781 (Windows XP SP2), before 14.0.0.20145 (Windows XP SP3) and before 17.0.0.3992 (Windows).
- Affected: Kaspersky Next Expert View Network Agent before 16.2.0.1547 (Windows).
- Affected: Kaspersky Next Pro View Network Agent before 15.1.0.22268.
- Affected: Kaspersky Security Center Administration Server before 15.1.0.28509 for Windows (Update 3).
- The advisory gives no attack vector, authentication requirements or exploitation status.
Remediation
- Apply the fixes described in Kaspersky security bulletin 12430#291026 (support.kaspersky.com/vulnerability/list-of-advisories/12430#291026).