Lenovo Commercial Vantage

• CVE-2026-15994 High 7.0 During an internal security assessment, an improper link following vulnerability was identified in Lenovo Vantage and Lenovo Commercial Vantage that could allow a local authenticated user to execute c 0.2%
• CVE-2025-6232 High 7.8 An improper validation vulnerability was reported in Lenovo Vantage that under certain conditions could allow a local attacker to execute code with elevated permissions by modifying specific registry 0.2%
• CVE-2025-6231 High 7.8 An improper validation vulnerability was reported in Lenovo Vantage that under certain conditions could allow a local attacker to execute code with elevated permissions by modifying an application con 0.2%
• CVE-2025-6230 Medium 5.3 A SQL injection vulnerability was reported in Lenovo Vantage that could allow a local attacker to modify the local SQLite database and execute limited SQLite commands. 0.2%