CVE-2026-15994 — Lenovo / Commercial Vantage

CVE-2026-15994

Lenovo / Commercial Vantage PUBLISHED

Description (CNA)

During an internal security assessment, an improper link following vulnerability was identified in Lenovo Vantage and Lenovo Commercial Vantage that could allow a local authenticated user to execute code with elevated privileges.

Affected (CNA)

Vendor / product	Versions
Lenovo / Commercial Vantage	affected 0 before 20.2026.20.0
Lenovo / Vantage	affected 0 before 10.2606.12

CWE

CWE-59

References

https://support.lenovo.com/us/en/product_security/LEN-223723

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.