7.3
Élevée
CVE-2026-15994 During an internal security assessment, an improper link following vulnerability was identified in Lenovo Vantage and…
Description
During an internal security assessment, an improper link following vulnerability was identified in Lenovo Vantage and Lenovo Commercial Vantage that could allow a local authenticated user to execute code with elevated privileges.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Commercial Vantage 20.2026 | premières → < 20.2026.20.0 | 20.2026.20.0 |
| Vantage 10.2606 | premières → < 10.2606.12 | 10.2606.12 |
Autres CVE de Commercial Vantage
Les 4 CVE de Commercial Vantage →
CVE-2025-6232
An improper validation vulnerability was reported in Lenovo Vantage that under certain conditions could allow a local…
8.5
Élevée
CVE-2025-6231
An improper validation vulnerability was reported in Lenovo Vantage that under certain conditions could allow a local…
8.5
Élevée
CVE-2025-6230
A SQL injection vulnerability was reported in Lenovo Vantage that could allow a local attacker to modify the local…
4.8
Moyenne