CVE-2026-1715

HIGH 7.1

CVSS Score

7.1

EPSS Score

0.0%

EPSS Percentile

0th

An input validation vulnerability was reported in the DeviceSettingsSystemAddin used in Lenovo Vantage and Lenovo Baiying that could allow a local authenticated user to modify arbitrary registry keys with elevated privileges.

CWE	CWE-88
Vendor	lenovo
Product	vantage
Published	Mar 11, 2026
Last Updated	Mar 12, 2026

Stay Ahead of the Next One

Get instant alerts for lenovo vantage

Be the first to know when new high vulnerabilities affecting lenovo vantage are published — delivered to Slack, Telegram or Discord.

Get Free Alerts → Free · No credit card · 60 sec setup

CVSS v3 Breakdown

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H

Attack Vector

Local

Attack Complexity

Low

Privileges Required

Low

User Interaction

None

Scope

Unchanged

Confidentiality

None

Integrity

High

Availability

High

Affected Versions

Lenovo / Vantage

0 < 1.0.8.15

Lenovo / Baiying

0 < 1.0.8.15

References

NVD ↗ CVE.org ↗ EPSS Data ↗

support.lenovo.com: https://support.lenovo.com/us/en/product_security/LEN-213044 iknow.lenovo.com.cn: https://iknow.lenovo.com.cn/detail/438815

Credits

Lenovo thanks Manuel Kiesel (cyllective AG) for reporting these issues.