Skip to content
Sign in
7.3 High

CVE-2026-15994 During an internal security assessment, an improper link following vulnerability was identified in Lenovo Vantage and…

Description

During an internal security assessment, an improper link following vulnerability was identified in Lenovo Vantage and Lenovo Commercial Vantage that could allow a local authenticated user to execute code with elevated privileges.

Affected products and versions

Product Affected versions Fixed in
Commercial Vantage 20.2026 earliest → < 20.2026.20.0 20.2026.20.0
Vantage 10.2606 earliest → < 10.2606.12 10.2606.12

Other CVEs of Commercial Vantage

The 4 CVEs of Commercial Vantage →
CVE-2025-6232 An improper validation vulnerability was reported in Lenovo Vantage that under certain conditions could allow a local… 8.5 High CVE-2025-6231 An improper validation vulnerability was reported in Lenovo Vantage that under certain conditions could allow a local… 8.5 High CVE-2025-6230 A SQL injection vulnerability was reported in Lenovo Vantage that could allow a local attacker to modify the local… 4.8 Medium
Track this CVE