CVE-2026-63427

HighCVSS 7.8

Published: 10/09/2026(UTC)Updated: 15/09/2026(UTC)Translated: 11/09/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.14%

3th percentile - higher than 3% of all known CVEs

Summary

An authentication bypass vulnerability was discovered in Lenovo Software Fix that could allow a local authenticated user to perform arbitrary code execution with elevated privileges.

Risk Assessment

A local user could gain elevated privileges and execute arbitrary code, potentially leading to full system compromise.

Recommendation

Update Lenovo Software Fix to the latest version containing the fix. Restrict local access to trusted users until the update is deployed.

Other vulnerabilities in Lenovo Software Fix

CVE-2026-4135Medium
A potential vulnerability in Lenovo Software Fix that during installation could allow a local authenticated user to perform an arbitrary file write with elevated privileges.

Original NVD description (English source)

An authentication bypass vulnerability was discovered in Lenovo Software Fix that could allow a local authenticated user to perform arbitrary code execution with elevated privileges.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS