CyberRota Analysis
This is a medium severity vulnerability with a CVSS score of 4.6. It affects Windows.
CVE
CVE-2026-20928
Severity
MEDIUM
CVSS
4.6
EPSS
0.43%
Windows
Original NVD Description
Improper removal of sensitive information before storage or transfer in Windows Recovery Environment Agent allows an unauthorized attacker to bypass a security feature with a physical attack.
Related CVEs
Other vulnerabilities affecting the same vendor(s)