AI and data stack advisories

Severe, 6 weeks1496Projects326

1496 severe, 6 weeks · 326 projects

Packages

Lenovo security advisories

27 advisories · 17 critical or high in 12 months · latest Oct 1

Advisories page

27 advisories

Medium 4.8Oct 1Lenovo Setup App: missing authorizationCVE-2026-93832fixed in 2026-01-01Critical 9.3Sep 10Lenovo Health Application: hard-coded credentialsCVE-2026-75940no fix yetHigh 8.5Sep 10Lenovo Software Fix: authentication bypassCVE-2026-63427fixed in 7.6.2.10High 8.4Sep 10Lenovo File Manager Application: improper authorizationCVE-2026-18994fixed in 9.8.1.77High 8.4Sep 10Lenovo Tianxi AI Agent PC Application: command injectionCVE-2026-19136fixed in 4.2.1.8111High 8.5Sep 10Lenovo Filez Client application: insecure permissionsCVE-2026-11813fixed in 11.7.1.0 +1High 7.3Sep 2Lenovo Smart Connect Application: missing authorizationCVE-2026-18058fixed in 9.03.00.61High 7.3Aug 13Lenovo System Update: authentication bypassCVE-2026-6387fixed in 5.08.04.85High 8.5Aug 13Lenovo Accessories and Display Manager: code executionCVE-2026-63423fixed in 1.0.9High 7.0Aug 13Lenovo Dock Manager: privilege escalationCVE-2026-63424fixed in 1.6.5.3High 8.5Aug 13Lenovo Dock Manager: insecure permissionsCVE-2026-63425fixed in 1.6.5.3Medium 6.9Aug 13Lenovo Dock Manager: arbitrary file writeCVE-2026-63426fixed in 1.6.5.3High 7.3Aug 13Lenovo Vantage: code executionCVE-2026-15994fixed in 20.2026.20.0 +1Medium 5.7Aug 13Lenovo E14 Gen 6 Laptops ELAN TrackPoi: out-of-bounds writeCVE-2026-14256fixed in E16 Gen 2 (Type 21M5 +3Medium 6.9Aug 13Lenovo Vantage: arbitrary file writeCVE-2026-12036fixed in 1.1.0.51Low 1.0Aug 4Lenovo XClarity Essentials OneCLI: local low-privileged attacker could...CVE-2026-16791fixed in 5.6High 7.0Aug 4Lenovo XClarity Orchestrator: improper certificate validationCVE-2026-16792no fix yetHigh 8.7Aug 4Lenovo XClarity Orchestrator: improper input validationCVE-2026-16793fixed in 2.2.0High 7.3Jul 16Lenovo Legion Zone: insecure permissionsCVE-2026-9046fixed in 2.0.26 +1Medium 6.8Jul 16Lenovo Smart Connect: improper access controlCVE-2026-6511fixed in 09.0.2.003.000High 7.0Jul 16Lenovo App Store: code executionCVE-2026-13104fixed in 9.0.2930.0514High 8.8Jul 16Lenovo XClarity Integrator for Microsoft Windows Admin Center: command injectionCVE-2026-14371no fix yetMedium 6.8Jul 16Lenovo IdeaPad Pro 5 16AGP11 BIOS: out-of-bounds writeCVE-2026-10589fixed in Yoga Pro 7 15IPH11 BIOS TNCN37WW +5Medium 6.7Jul 16Lenovo IdeaPad Pro 5 16AGP11 BIOS: missing authenticationCVE-2026-10590fixed in Yoga Pro 7 15IPH11 BIOS TNCN37WW +5High 7.0Jul 16Lenovo App Store: path traversalCVE-2026-13103fixed in 9.0.2930.0514Medium 6.8Jul 16Lenovo IdeaPad Pro 5 16AGP11 BIOS: out-of-bounds writeCVE-2026-10587fixed in Yoga Pro 7 15IPH11 BIOS TNCN37WW +5Medium 6.7Jul 16Lenovo IdeaPad Pro 5 16AGP11 BIOS: system information exposureCVE-2026-10588fixed in Yoga Pro 7 15IPH11 BIOS TNCN37WW +5
About Lenovo

Security advisories Lenovo publishes for its own products.

support.lenovo.com/us/en/product_security/homeLenovo

Lenovo elsewhere on Ibis: Paydays