Skip to content
Sign in
6.9 Medium

CVE-2026-12036 An improper link following vulnerability was reported in the VantageCoreAddin for Lenovo Vantage and Lenovo Commercial…

Description

An improper link following vulnerability was reported in the VantageCoreAddin for Lenovo Vantage and Lenovo Commercial Vantage that could allow a local authenticated user to perform an arbitrary file deletion with elevated privileges.

Affected products and versions

Product Affected versions Fixed in
Vantage 1.1 earliest → < 1.1.0.51 1.1.0.51

Other CVEs of Vantage

The 15 CVEs of Vantage →
CVE-2026-15994 During an internal security assessment, an improper link following vulnerability was identified in Lenovo Vantage and… 7.3 High CVE-2026-0827 During an internal security assessment, a potential vulnerability was discovered in Lenovo Diagnostics and the… 6.9 Medium CVE-2026-1717 An input validation vulnerability was reported in the LenovoProductivitySystemAddin used in Lenovo Vantage and Lenovo… 6.8 Medium CVE-2026-1716 An input validation vulnerability was reported in the DeviceSettingsSystemAddin used in Lenovo Vantage and Lenovo… 6.9 Medium
Track this CVE