CVE-2026-88941 PUBLISHED

Assigner: Kaspersky
Reserved: 10.09.2026 Published: 29.10.2026 Updated: 29.10.2026

Kaspersky has fixed a vulnerability in the Network Agent for Windows module of Kaspersky Security Center. The vulnerability could potentially cause the Network Agent module of Kaspersky Security Center to malfunction. There are no evidence of the vulnerability exploitation in-the-wild.

Metrics

CVSS 4.0

CVSS Vector: CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:N/SC:N/SI:H/SA:H
CVSS Score: 6.2

Exploitability Metrics		Vulnerable System Impact Metrics		Subsequent System Impact Metrics
Attack Vector	Local	Confidentiality	Low	Confidentiality	None
Attack Complexity	Low	Integrity	Low	Integrity	High
Attack Requirements	None	Availability	None	Availability	High
Privileges Required	Low
User Interaction	None

CVSS 4.0

Product Status

Vendor	Kaspersky
Product	Network Agent
Versions	Default: unaffected Version 16.3.0.1207 is affected Version 16.2.0.1477 is affected Version 16.2.0.1023 is affected Version 16.2.0.917 is affected Version 16.1.0.6517 is affected Version 16.0.0.254 is affected Version 15.4.0.8952 is affected Version 15.3.0.392 is affected Version 15.2.0.442 is affected Version 15.1.0.20748 is affected Version 15.1.0.11795 is affected Version 14.0.0.20023 is affected Version 10.5.1781 is affected

Vendor	Kaspersky
Product	Administration Server
Versions	Default: unaffected Version 15.1.0.22239 is affected Version 15.1.0.20748 is affected

Solutions

Users of Kaspersky Vulnerability Management should update the solution to version 1.1.

References

Advisory issued on October 29, 2026

Problem Types

CWE-306: Missing Authentication for Critical Function CWE