CVE-2026-12036

Lenovo / Vantage PUBLISHED

Description (CNA)

An improper link following vulnerability was reported in the VantageCoreAddin for Lenovo Vantage and Lenovo Commercial Vantage that could allow a local authenticated user to perform an arbitrary file deletion with elevated privileges.

Affected (CNA)

Vendor / product	Versions
Lenovo / Vantage	affected 0 before 1.1.0.51

CWE

CWE-59

References

https://support.lenovo.com/us/en/product_security/LEN-223723

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.