CVE-2026-63427

Summary

An authentication bypass vulnerability was discovered in Lenovo Software Fix that could allow a local authenticated user to perform arbitrary code execution with elevated privileges.

Affected Software

Weaknesses

• CWE-290: CWE-290: Authentication Bypass by Spoofing

ADP Enrichment

CISA ADP Vulnrichment

• SSVC:
• Exploitation: none
  • Automatable: no
  • Technical Impact: total

References

• https://support.lenovo.com/us/en/product_security/LEN-217409
• https://support.lenovo.com/us/en/downloads/ds101291-rescue-and-smart-assistant-lmsa

• ←Previous
• Next→