CVE-2026-0827 - Vulnerability Analysis

Overview

Lenovo Diagnostics and HardwareScanAddin in Lenovo Vantage contain an arbitrary file write vulnerability caused by improper handling during installation or hardware scan, letting local authenticated users write files with elevated privileges.

Severity & Score

Impact

Local authenticated users can write arbitrary files with elevated privileges, potentially leading to full system compromise.

Mitigation

Update Lenovo Diagnostics and HardwareScanAddin to the latest available versions.

References

• https://support.lenovo.com/us/en/product_security/LEN-210693

Related Resources

• Vulnerability Intelligence Dashboard
• Credential Scanner