CVE-2026-0827: Lenovo Diagnostics

High severity, CVSS 7.1. EPSS: 0.2% chance of exploitation in the next 30 days.

During an internal security assessment, a potential vulnerability was discovered in Lenovo Diagnostics and the HardwareScanAddin used in Lenovo Vantage that, during installation or when using hardware scan, could allow a local authenticated user to perform an arbitrary file write with elevated privileges.

Affected products

• Lenovo Diagnostics: before 5.26.0 (fixed in 5.26.0)
• Lenovo Hardware Scan: before 4.7.1.4 (fixed in 4.7.1.4)

Published 2026-04-15. Last modified 2026-08-24.