CVE-2026-6282
HighCVSS 8.1Exploitation Probability (EPSS)
Low risk33th percentile - higher than 33% of all known CVEs
Summary
A potential improper file path validation vulnerability was reported in some Lenovo Personal Cloud Storage devices that could allow a remote authenticated user to move or access files belonging to other users on the same device.
Risk Assessment
This vulnerability may lead to unauthorized access to other users' data, posing a risk to privacy and information security.
Recommendation
It is recommended to update Lenovo Personal Cloud Storage devices to the latest software version to patch this vulnerability and implement additional access control measures.
Other vulnerabilities in Lenovo Personal Cloud Storage devices
Original NVD description (English source)
A potential improper file path validation vulnerability was reported in some Lenovo Personal Cloud Storage devices that could allow a remote authenticated user to move or access files belonging to other users on the same device.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS