CVE-2026-15994
HighCVSS 7.0Exploitation Probability (EPSS)
Low risk2th percentile - higher than 2% of all known CVEs
Summary
During an internal security assessment, an improper link following vulnerability was identified in Lenovo Vantage and Lenovo Commercial Vantage that could allow a local authenticated user to execute code with elevated privileges.
Risk Assessment
A local user with basic privileges can gain elevated privileges and execute arbitrary code, potentially leading to full system compromise.
Recommendation
Update Lenovo Vantage and Lenovo Commercial Vantage to the latest version containing the fix. Restrict local access to systems where this software is installed.
Original NVD description (English source)
During an internal security assessment, an improper link following vulnerability was identified in Lenovo Vantage and Lenovo Commercial Vantage that could allow a local authenticated user to execute code with elevated privileges.