CVE-2026-0940 — Lenovo / ThinkPad T14 Gen 5 BIOS

Description (CNA)

A potential improper initialization vulnerability was reported in the BIOS of some ThinkPads that could allow a local privileged user to modify data and execute arbitrary code.

Affected (CNA)

Vendor / product	Versions
Lenovo / ThinkPad T14 Gen 5 BIOS	affected 0 through 1.17
Lenovo / ThinkPad P14s Gen 5 BIOS	affected 0 through 1.17
Lenovo / ThinkPad Z13 Gen 2 BIOS	affected 0 through 1.37
Lenovo / ThinkPad Z16 Gen 2 BIOS	affected 0 through 1.37
Lenovo / ThinkPad P16v Gen 1 BIOS	affected 0 through 1.62
Lenovo / ThinkPad P15v Gen 3 BIOS	affected 0 through 1.28
Lenovo / ThinkPad Z13 Gen 1 BIOS	affected 0 through 1.76
Lenovo / ThinkPad Z16 Gen 1 BIOS	affected 0 through 1.76

CWE

CWE-665

References

https://support.lenovo.com/us/en/product_security/LEN-213040

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.