Read the docs
TI-2026-01321 Aliases CVE-2026-1636GHSA-qpgx-vhr9-cwj5

Uncontrolled search path in Lenovo Service Bridge

Priority LOW 25CWE-427Published · Updated

Key facts

Attack vector
Local
Privileges required
Low
User interaction
Passive
Attack complexity
Low
Attack requirements
Present
Impact type
Code execution
Confidentiality · integrity · availability
High · High · High
Fix status
Fixed

Attack profile from CVSS 4.0 · CNA. Fix status from CNA. Impact type from CWE-427.

Summary

A potential DLL hijacking vulnerability was reported in Lenovo Service Bridge that, under certain conditions, could allow a local authenticated user to execute code with elevated privileges.

Why it matters now

Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.00125 2nd percentileScored 2026-11-07
Fix Fixed Service Bridge (Lenovo): 5.0.2.20

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation
None
Automatable
No
Technical impact
Total

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

VendorProductAffected versionsFixed inStatusSource
LenovoService Bridgebefore 5.0.2.205.0.2.20Patch availableCNA
  • Service Bridge VendorLenovo Affected before 5.0.2.20 Fixed in 5.0.2.20 Patch available CNA

CPE configurations NVD · 1

CPEVersionsRoleVendor
cpe:2.3:a:lenovo:service_bridge:*:*:*:*:*:*:*:*before 5.0.2.20VulnerableLenovo
  • cpe:2.3:a:lenovo:service_bridge:*:*:*:*:*:*:*:* Versions before 5.0.2.20 Vulnerable ·Lenovo

Remediation

  • Fix · CNA Service Bridge (Lenovo) Fixed in 5.0.2.20

Timeline

  1. 2026-10-02 Threatist record created from CVE-2026-1636
  2. 2026-10-03 Alias added: GHSA-qpgx-vhr9-cwj5

References

Advisory 1

  • TI-2019-04369 A vulnerability reported in Lenovo Service Bridge before version 4.1.0.1 could allow remote code execution. CVSS 3.1CRITICAL 9.8
  • TI-2019-04368 A vulnerability reported in Lenovo Service Bridge before version 4.1.0.1 could allow remote code execution. CVSS 3.1CRITICAL 9.8
  • TI-2019-04367 A vulnerability reported in Lenovo Service Bridge before version 4.1.0.1 could allow cross-site request forgery. CVSS 3.1HIGH 8.8
  • TI-2019-04370 A vulnerability reported in Lenovo Service Bridge before version 4.1.0.1 could allow unencrypted downloads over FTP. CVSS 3.1HIGH 7.5

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences