Investigate in your agent.

Turn this advisory into a focused investigation. Ask your agent to check your project’s versions, explain the evidence, and suggest a compatible fix.

Your agent needs remote MCP support and access to https://cve.new/mcp.

Read the setup guide

Skip to content
Check your stack
CVE-2026-88941medium6.2

Kaspersky has fixed a vulnerability in the Network Agent for Windows module of Kaspersky Security Center.

Impact

A vulnerability in Kaspersky Security Center's Network Agent for Windows module could cause it to malfunction. The affected versions include 10.5.1781, 14.0.0.20023, 15.1.0.11795, 15.1.0.20748, 15.2.0.442, 15.3.0.392, 15.4.0.8952, 16.0.0.254, 16.1.0.6517, 16.2.0.917, 16.2.0.1023, 16.2.0.1477, and 16.3.0.1207. There is no evidence of in-the-wild exploitation.

Summarized by @cf/meta/llama-3.3-70b-instruct-fp8-fast. Verify details against the original sources.

What to do

Users of Kaspersky Security Center for Linux should install the Network Agent for Windows module, version 17.0.0.3992, from the Kaspersky Security Center 17 distribution package.

Kaspersky guidance

Users of Kaspersky Security Center for Windows should install the Administration Server module (version 15.1.0.28509) from the Kaspersky Security Center 15.1 Update 3 for Windows distribution package, and then install the Network Agent for Windows module (version 17.0.0.3992).

Kaspersky guidance

Users running Network Agent on Windows XP should install the updated Network Agent for Windows XP SP3 module version 14.0.0.20145 or the Network Agent for Windows XP SP2 module version 10.5.0.1781 (the build number has not changed).

Kaspersky guidance

Users of Kaspersky Next Expert View (Kaspersky Next) should install the updated Network Agent for Windows module version 16.2.0.1547 from the list of current versions of Kaspersky applications.

Kaspersky guidance

Users of Kaspersky Next Expert View (Kaspersky Next) who use Network Agent on Windows XP should install the updated Network Agent for Windows XP SP3 module version 14.0.0.20145 from the list of current versions of Kaspersky applications.

Kaspersky guidance

Users of Kaspersky Endpoint Security for Virtualization 5.2 Light Agent should install the updated Administration Server for Windows and Network Agent for Windows modules.

Kaspersky guidance

Users of Kaspersky Endpoint Security Cloud (also referred to as Kaspersky Next Pro View) should install the Network Agent for Windows module version 15.1.0.22268.

Kaspersky guidance

Users of Kaspersky Vulnerability Management should update the solution to version 1.1.

Kaspersky guidance

Affected packages

This source has no supported package-version data for matching. You can read the advisory here, but this record alone cannot power a dependency check.

Affected products

Vendor version evidence. Product records are separate from automatic dependency matching.

Kaspersky · Kaspersky

Network Agent

13 ranges
Platforms: Windows

Compare with this publisher’s ranges. This does not inspect your installation.

affected

16.3.0.1207

16.2.0.1477

16.2.0.1023

16.2.0.917

16.1.0.6517

16.0.0.254

15.4.0.8952

15.3.0.392

15.2.0.442

15.1.0.20748

15.1.0.11795

14.0.0.20023

10.5.1781

unaffected

unknown

Other versions: unaffected

Kaspersky · Kaspersky

Administration Server

2 ranges
Platforms: Windows

Compare with this publisher’s ranges. This does not inspect your installation.

affected

15.1.0.22239

15.1.0.20748

unaffected

unknown

Other versions: unaffected

Original source description

Kaspersky has fixed a vulnerability in the Network Agent for Windows module of Kaspersky Security Center. The vulnerability could potentially cause the Network Agent module of Kaspersky Security Center to malfunction. There are no evidence of the vulnerability exploitation in-the-wild.

Inside the record

Evidence available

Package identity · not supplied
Version evidence
Remediation guidance
Weakness classification
Additional publishers

Describes the evidence in this view, not whether the product is safe.

Original records

CVE-2026-88941

View the latest unmodified CVE JSON from the official source. It may be newer than this imported page.

cve.new JSON →

Underlying weaknesses

The source’s classification of what caused the vulnerability.

CWE-306 ↗

CWE-306: Missing Authentication for Critical Function

Kaspersky

Related →
Contributing organizations · 2
Kaspersky

Assigning organization

2026-10-29
CISA-ADP

Additional data publisher

2026-10-29

What changed

Follow changes
No substantive changes have been recorded here yet. History starts when cve.new observes a change after tracking is enabled; earlier edits are not reconstructed.

Large field values are marked as truncated previews. Original source snapshots remain retained.

References

1 sources