CVE-2026-63426
HighCVSS 7.1Exploitation Probability (EPSS)
Low risk3th percentile - higher than 3% of all known CVEs
Summary
During an internal security assessment, a potential vulnerability was discovered in Lenovo Dock Manager that could allow an authenticated local user to perform an arbitrary file deletion with elevated privileges.
Risk Assessment
A local user could delete critical system files, potentially leading to system instability or data loss.
Recommendation
It is recommended to update Lenovo Dock Manager to the latest version that includes the fix. Also, restrict local user privileges.
Other vulnerabilities in Lenovo Dock Manager
See all- CVE-2026-63425High
During an internal security assessment, a potential improper permissions vulnerability was discovered in Lenovo Dock Manager that could allow a local authenticated user to execute arbitrary code with elevated privileges.
- CVE-2026-63424High
During an internal security assessment, an improperly protected key was discovered in Lenovo Dock Manager that could allow a local authenticated user to escalate privileges.
Original NVD description (English source)
During an internal security assessment, a potential vulnerability was discovered in Lenovo Dock Manager that could allow an authenticated local user to perform an arbitrary file deletion with elevated privileges.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS

