Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Release: Lenovo Home Storage Hub T20, Home Storage Hub X20 and 3 more products 5.4.4.x20.1, 5.4.8.t2pro.2 and 3 more versions Clear all filters
TI-2026-05508 CVE-2026-6282 · GHSA-m6vj-6h49-wg69

Path traversal in Lenovo Personal Cloud T2s

Priority LOW 39

A potential improper file path validation vulnerability was reported in some Lenovo Personal Cloud Storage devices that could allow a remote authenticated user to move or access files belonging to other users on the same…

CVSS 4.0HIGH 8.6 Network Low privileges No interaction EPSS 0.00391 Published 2026-05-13 Fixed in 5.5.6.t2s.3, 5.4.8.t2pro.2 +3 CWE-22
TI-2026-05507 CVE-2026-6281 · GHSA-q5wc-3rhr-ppvw

OS command injection in Lenovo Personal Cloud T2s

Priority MEDIUM 40

A potential vulnerability was reported in some Lenovo Personal Cloud Storage devices that could allow a remote authenticated user on the local network to execute arbitrary commands on the device.

CVSS 4.0HIGH 8.7 Network Low privileges No interaction EPSS 0.00445 Published 2026-05-13 Fixed in 5.5.6.t2s.3, 5.4.8.t2pro.2 +3 CWE-78