← All credits

Lenovo thanks cy for reporting this vulnerability.

1 vulnerability record and advisories credit this contributor.

CVE-2026-12036
An improper link following vulnerability was reported in the VantageCoreAddin for Lenovo Vantage and Lenovo Commercial Vantage that could allow a local authenticated user to perform an arbitrary file deletion with elevated privileges.