Skip to content
CVE PROGRAM SOURCE RECORD7.3 High

CVE-2026-15994

During an internal security assessment, an improper link following vulnerability was identified in Lenovo Vantage and Lenovo Commercial Vantage that could allow a local authenticat

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
lenovo

Description

During an internal security assessment, an improper link following vulnerability was identified in Lenovo Vantage and Lenovo Commercial Vantage that could allow a local authenticated user to execute code with elevated privileges.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Lenovo Commercial Vantage

Default version status: unaffected

  • 0 to < 20.2026.20.0affected

Lenovo Vantage

Default version status: unaffected

  • 0 to < 10.2606.12affected

References