Vulnerability · Published Sep 10, 2026 · Assigned by lenovo
CVE-2026-11813
High 7.8
In plain English
A high-severity incorrect default permissions in FileZ Client from Lenovo. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.1% (higher than 3% of all known vulnerabilities).
Severity (CVSS 3.1)7.8High
Exploit odds (30 days)0.1%top 96.8% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known
Official description
A potential improper permissions vulnerability was reported in the Lenovo Filez Client application that could allow a local authenticated user to escalate privileges.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| Lenovo | FileZ Client | 0 – before 11.7.1.0 |
| Lenovo | FileZ Enterprise | 0 – before 11.5.1.0 |
Weakness: CWE-276 · Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
References
- https://www.filez.com/en/securityPolicy/5.html?1788882250 vendor-advisory