Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

TI-2026-13394 CVE-2026-15994 · GHSA-29w7-7qqh-9g25

Link following in Lenovo Commercial Vantage

Priority LOW 33

During an internal security assessment, an improper link following vulnerability was identified in Lenovo Vantage and Lenovo Commercial Vantage that could allow a local authenticated user to execute code with elevated pr…

CVSS 4.0HIGH 7.3 Local Low privileges No interaction EPSS 0.00156 Published 2026-08-13 Fixed in 20.2026.20.0, 10.2606.12 CWE-59
TI-2026-10375 CVE-2026-12036 · GHSA-f95j-cwmr-fqw7

Link following in Lenovo Vantage

Priority LOW 32

An improper link following vulnerability was reported in the VantageCoreAddin for Lenovo Vantage and Lenovo Commercial Vantage that could allow a local authenticated user to perform an arbitrary file deletion with elevat…

CVSS 4.0MEDIUM 6.9 Local Low privileges No interaction EPSS 0.0016 Published 2026-08-13 Fixed in 1.1.0.51 CWE-59