vulnti.work

A potential authentication bypass vulnerability was reported in Lenovo System Update that could allow a local authenticated user to execute arbitrary code with elevated privileges.

High CVSS 7.0
CVECVE-2026-6387
First seen2026-08-24 17:16 UTC
Disclosed2026-08-13 15:19 UTC
Last updated2026-08-24 17:16 UTC
Channel statusauto

Summary

A potential authentication bypass vulnerability was reported in Lenovo System Update that could allow a local authenticated user to execute arbitrary code with elevated privileges.

In-depth triage

No in-depth report has been generated yet (DR-003 v2 AI pipeline is under construction).

Sources

  • NVD DATABASE

Original Links

Timeline

  1. nvd_ingest NVD