01 Record

CVE-2026-15994

During an internal security assessment, an improper link following vulnerability was identified in Lenovo Vantage and Lenovo Commercial Vantage that could allow a local authenticated user to execute

HighPUBLISHEDCNA: lenovo

Base score7.3 CVSS v4.0CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

View raw JSON CVE Program record

02 Description

During an internal security assessment, an improper link following vulnerability was identified in Lenovo Vantage and Lenovo Commercial Vantage that could allow a local authenticated user to execute

03 Metadata

Published: 2026-08-13 14:53Z1 DAY AGO
Last updated: 2026-08-13 15:54Z1 DAY AGO
Reserved: 2026-07-16
Assigning CNA: lenovo
Record state: PUBLISHED
Severity: High (CVSS 7.3)
CVSS vector: CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
Weaknesses: CWE-59
SSVC decision: ExploitationnoneAutomatablenoTechnical Impacttotal
Data version: 5.2
Document digest: 928fbec0f3db75209d360a9f8b9f2b744d38f0c25e6d2e5d7c1fce97cd80feb4

04 Affected products

VendorProductVersionsPlatforms

LenovoCommercial Vantage0 to < 20.2026.20.0—

LenovoVantage0 to < 10.2606.12—

05 References

support.lenovo.comhttps://support.lenovo.com/us/en/product_security/LEN-223723vendor-advisory

06 Remediation

Update Lenovo Commercial Vantage to version 20.2026.20.0 or later.

Update Lenovo Vantage to version 10.2606.12 or later.

01 Record