4
CVEs
1
Critical
3
High
0
KEV
0
PoC
1
Unpatched C/H
75.0%
Patch Rate
0.2%
Avg EPSS
Severity Breakdown
CRITICAL
1
HIGH
3
MEDIUM
0
LOW
0
Monthly CVE Trend
Affected Products (30)
Linux Kernel
23
Thinkcentre M625Q Firmware
23
Thinkcentre M80T Firmware
22
Thinkcentre M90S Firmware
22
Thinkcentre M80S Firmware
22
Thinkcentre M90T Firmware
22
Ideacentre Gaming 5 14Iob6 Firmware
21
Ideacentre 5 14Iob6 Firmware
21
Thinkcentre M90Q Tiny Firmware
21
V50A 24Imb Firmware
21
Thinkcentre M70C Firmware
21
V50S 07Imb Firmware
21
Thinkcentre M75T Gen 2 Firmware
21
Ideacentre Creator 5 14Iob6 Firmware
21
Xclarity Administrator
21
V30A 22Iml Firmware
21
Thinkcentre M630E Firmware
21
V50A 22Imb Firmware
21
Thinkcentre M90A Firmware
21
Thinkcentre M75N Firmware
21
Thinkcentre M75S Gen 2 Firmware
21
Ideacentre 3 07Imb05 Firmware
21
Thinkcentre M80Q Firmware
21
Thinkcentre M70Q Firmware
21
Thinkcentre M70S Firmware
21
Ideacentre G5 14Imb05 Firmware
21
V50T 13Imb Firmware
21
Thinkcentre M70T Firmware
21
Ideacentre G5 14Amr05 Firmware
20
Thinkstation P520 Workstation Firmware
20
Top Risky CVEs
| CVE | Summary | Severity | CVSS | EPSS | Priority | Signals |
|---|---|---|---|---|---|---|
| CVE-2026-75940 | Sensitive health-data exposure in the Lenovo Health Android application (distributed exclusively in the Chinese market) stems from hardcoded credentials (CWE-798) that let an attacker access users' health-related information without legitimate authentication. Reported by Lenovo PSIRT and tracked under a single Lenovo advisory, it carries a CVSS 4.0 base of 9.3 driven by high confidentiality impact. No public exploit has been identified at time of analysis, and it is not listed in CISA KEV. | CRITICAL | 9.3 | 0.3% | 47 |
No patch
|
| CVE-2026-63427 | Local privilege escalation in Lenovo Rescue and Smart Assistant (LMSA) enables a local authenticated user to execute arbitrary code with elevated privileges by exploiting a capture-and-replay authentication bypass (CWE-290) in the application's privileged service layer. The vulnerability is strictly local in scope per the CVSS 4.0 vector (AV:L/PR:L), limiting the threat to attackers who already hold a standard user account on an affected Lenovo device. Lenovo has published advisory LEN-217409 with remediation guidance; no public exploit has been identified at time of analysis. | HIGH | 8.5 | 0.1% | 43 |
|
| CVE-2026-11813 | Privilege escalation in the Lenovo Filez Client application allows a local authenticated user to gain elevated system rights via improper file or directory permissions (CWE-276). The CVSS 4.0 score of 8.5 reflects a meaningful local attack path with low complexity and no special attack requirements, though exploitation is bounded by the requirement for an existing local foothold. No active exploitation or public proof-of-concept has been identified at time of analysis. | HIGH | 8.5 | 0.1% | 43 |
|
| CVE-2026-18994 | Improper export of Android application components in Lenovo File Manager (Chinese-market distribution) enables a locally authenticated user or co-installed application to read or modify files that the application designates as protected. The root cause is CWE-926, where one or more Android components - likely a content provider or activity - are exported without enforcing the application's own authorization logic. No public exploit code exists and the vulnerability has not been added to CISA KEV; however, the CVSS 4.0 score of 8.4 reflects genuine high-impact file access if an attacker can install a companion malicious application on the target device. | HIGH | 8.4 | 0.1% | 42 |
|