Threat database

CVE-2026-16793 is a high-severity vulnerability in Lenovo XClarity Orchestrator 2.2.0 where improper neutralization of special elements in OS commands allows an authenticated attacker to execute arbitrary commands with privileged user rights. This vulnerability does not require user interaction and affects confidentiality, integrity, and availability. No patch or official remediation has been confirmed yet.

CVE-2026-16792 is an improper certificate validation vulnerability in multiple Lenovo XClarity Orchestrator 2.2.0 microservices. This flaw could allow an adjacent network attacker to intercept sensitive communications by performing a machine-in-the-middle attack on HTTPS connections during TLS certificate validation under certain conditions. The vulnerability has a medium severity score of 6.1 and no known exploits in the wild. No official patch or remediation guidance has been provided yet.

CVE-2026-16791 is a low-severity vulnerability in Lenovo XClarity Essentials OneCLI for Linux versions 5.5.0 and below. It involves insecure temporary file creation that could allow a local low-privileged attacker to overwrite or truncate arbitrary local files when the program is run with elevated privileges. The vulnerability does not impact confidentiality but can affect integrity and availability. No official patch or remediation guidance is currently available from the vendor. There are no known exploits in the wild at this time.

A potential missing authentication vulnerability could allow a local privileged attacker to use WMI commands to arbitrarily trigger a System Management Interrupt handler.

A potential out of bounds write vulnerability could allow a local privileged attacker to execute code in System Management Mode.

A potential vulnerability could allow a local privileged attacker to disclose the address of protected System Management Mode memory.

A potential out-of-bounds write vulnerability could allow a local privileged attacker to modify power management settings in System Management Mode.

The Lenovo XClarity Integrator for Windows Admin Center plugin version 5.1.1 and below running on the WAC Gateway is vulnerable to Powershell Command Injection when establishing remote PowerShell commands.

A potential vulnerability was reported in Lenovo App Store, distributed exclusively in the Chinese market, that could allow a local authenticated user to execute arbitrary code with elevated privileges.

A potential path traversal vulnerability was reported in Lenovo App Store, distributed exclusively in the Chinese market, that could allow a local authenticated user to execute arbitrary code.

A potential insecure permissions vulnerability was reported in Legion Zone and the Lenovo App Store Windows applications, distributed exclusively in the Chinese market, that when installed on a non‑system partition, could allow a local user to execute arbitrary code.

During an internal security assessment, a potential improper access control vulnerability was discovered in Lenovo Smart Connect for Windows that could allow a local authenticated user to access files owned by a different user on the same system.

During an internal security assessment, a potential out-of-bounds write vulnerability was discovered in the BIOS of some ThinkPad products could allow a privileged local user to execute code in System Management Mode (SMM).

During an internal security assessment, a potential vulnerability was discovered in some ThinkPad embedded controller firmware that could allow a privileged local user to perform arbitrary reads or writes to privileged memory regions.

A potential authentication bypass was reported in Lenovo Smart Connect for Windows that could allow a local authenticated user to execute arbitrary code with elevated privileges.

A potential uncontrolled search path vulnerability was reported in the LanSchool Classic client application that could allow a local authenticated user to execute arbitrary code with elevated privileges.

During an internal security assessment, a potential vulnerability was discovered in Lenovo Accessories and Display Manager for Enterprise for Windows that could allow a local authenticated user to execute arbitrary code with elevated privileges.

A vulnerability was identified in the Lenovo Android Application, distributed exclusively on tablets in the Chinese market, that could allow a website visited by the built-in browser to overwrite system clipboard contents.

Lenovo LegionSpace 1.7.11.2 - 'DAService' Unquoted Service Path

CVE-2026-6282 is a high-severity path traversal vulnerability in Lenovo Personal Cloud T2s devices. It allows a remote authenticated user to improperly access or move files belonging to other users on the same device due to insufficient file path validation. The vulnerability does not require user interaction and has a low attack complexity. No official patch or remediation guidance has been provided yet, and no known exploits are reported in the wild.