CVE-2026-6281

HighCVSS 8.8

Published: 13/05/2026(UTC)Updated: 26/10/2026(UTC)Translated: 15/06/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.45%

39th percentile - higher than 39% of all known CVEs

Summary

A potential vulnerability was reported in some Lenovo Personal Cloud Storage devices that could allow a remote authenticated user on the local network to execute arbitrary commands on the device.

Risk Assessment

This vulnerability could lead to unauthorized access and control over the device, posing a serious threat to data security.

Recommendation

It is recommended to update the device firmware and monitor local network access to mitigate the risk.

Other vulnerabilities in Lenovo Personal Cloud Storage devices

CVE-2026-6282High
A potential improper file path validation vulnerability was reported in some Lenovo Personal Cloud Storage devices that could allow a remote authenticated user to move or access files belonging to other users on the same device.

Original NVD description (English source)

A potential vulnerability was reported in some Lenovo Personal Cloud Storage devices that could allow a remote authenticated user on the local network to execute arbitrary commands on the device.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS