CVE Catalog
CVE-2026-6387
HighCVSS 7.0Exploitation Probability (EPSS)
Low risk0.13%
3th percentile - higher than 3% of all known CVEs
Summary
A potential authentication bypass vulnerability was reported in Lenovo System Update that could allow a local authenticated user to execute arbitrary code with elevated privileges.
Risk Assessment
A local user with basic privileges could gain full control over the system, potentially leading to malware installation or data theft.
Recommendation
It is recommended to update Lenovo System Update to the latest available version that includes the fix. Also, restrict system access to trusted users only.
Original NVD description (English source)
A potential authentication bypass vulnerability was reported in Lenovo System Update that could allow a local authenticated user to execute arbitrary code with elevated privileges.