CVE-2026-0827 — Lenovo / Diagnostics

CVE-2026-0827

Lenovo / Diagnostics PUBLISHED

Description (CNA)

During an internal security assessment, a potential vulnerability was discovered in Lenovo Diagnostics and the HardwareScanAddin used in Lenovo Vantage that, during installation or when using hardware scan, could allow a local authenticated user to perform an arbitrary file write with elevated privileges.

Affected (CNA)

Vendor / product	Versions
Lenovo / Diagnostics	affected 0 before 5.26.0
Lenovo / Vantage	affected 0 before 4.7.1.4

CWE

CWE-59

References

https://support.lenovo.com/us/en/product_security/LEN-210693

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.