CVE-2026-1716 MEDIUM

CVE-2026-1716

Vendor Lenovo
Product Vantage
Weakness CWE-88
Published March 11, 2026
Last update March 12, 2026
View on NVD All CVEs

CVSS base score

6.9/10
Attack vector Local
Attack complexity Low
Privileges required Low
User interaction None
Confidentiality —
Integrity —

CVSS vector

CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:H/VA:H/SC:N/SI:N/SA:N

What the vulnerability does

01Description

An input validation vulnerability was reported in the DeviceSettingsSystemAddin used in Lenovo Vantage and Lenovo Baiying that could allow a local authenticated user to delete arbitrary registry keys with elevated privileges.

Key dates

02Disclosure timeline

March 11, 2026 CVE published
March 12, 2026 Record updated

Related vulnerabilities

04Related CVE

CVE-2024-7573 Relevanssi Live Ajax Search <= 2.4 - Unauthenticated WP_Query Argument Injection CVE-2022-23740 Improper Neutralization of Argument Delimiters in a Command in GitHub Enterprise Server leading to Remote Code Execution CVE-2026-43893 exiftool-vendored: Argument injection via newline characters in tag names CVE-2025-46835 Git GUI can create and overwrite files for which the user has write permission CVE-2026-25134 Group-Office Argument Injection in MaintenanceController::actionZipLanguage