CVE-2026-6387
HighCVSS 7.0Exploitation Probability (EPSS)
Low risk3th percentile - higher than 3% of all known CVEs
Summary
A potential authentication bypass vulnerability was reported in Lenovo System Update that could allow a local authenticated user to execute arbitrary code with elevated privileges.
Risk Assessment
A local user with basic privileges could gain full control over the system, potentially leading to malware installation or data theft.
Recommendation
It is recommended to update Lenovo System Update to the latest available version that includes the fix. Also, restrict system access to trusted users only.
Other vulnerabilities in Lenovo System Update
See all- CVE-2015-6971High
Lenovo System Update (formerly ThinkVantage System Update) before version 5.07.0013 allows local users to submit commands to the System Update service (SUService.exe) and gain privileges by launching signed Lenovo executables.
- CVE-2015-8109High
Lenovo System Update before version 5.07.0019 allows local users to gain privileges by predicting the tvsu_tmp_xxxxxXXXXX account credentials, which requires knowledge of the time this account was created.
- CVE-2015-2233High
Lenovo System Update (formerly ThinkVantage System Update) before 5.06.0034 does not properly validate CA chains during signature validation, allowing man-in-the-middle attackers to upload and execute arbitrary files via a crafted certificate.
- CVE-2015-2219High
Lenovo System Update before version 5.06.0034 uses predictable security tokens, allowing local users to gain privileges by sending a valid token with a command to the System Update service (SUService.exe) through an unspecified named pipe.
Original NVD description (English source)
A potential authentication bypass vulnerability was reported in Lenovo System Update that could allow a local authenticated user to execute arbitrary code with elevated privileges.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS