CVE-2026-0940: Lenovo Thinkpad p14s Gen 5 BIOS

Medium severity, CVSS 6.7. EPSS: 0.1% chance of exploitation in the next 30 days.

A potential improper initialization vulnerability was reported in the BIOS of some ThinkPads that could allow a local privileged user to modify data and execute arbitrary code.

Affected products

• Lenovo Thinkpad p14s Gen 5 BIOS: up to and including 1.17
• Lenovo Thinkpad p15v Gen 3 BIOS: up to and including 1.28
• Lenovo Thinkpad p16v Gen 1 BIOS: up to and including 1.62
• Lenovo Thinkpad t14 Gen 5 BIOS: up to and including 1.17
• Lenovo Thinkpad z13 Gen 1 BIOS: up to and including 1.76
• Lenovo Thinkpad z13 Gen 2 BIOS: up to and including 1.37
• Lenovo Thinkpad z16 Gen 1 BIOS: up to and including 1.76
• Lenovo Thinkpad z16 Gen 2 BIOS: up to and including 1.37

Published 2026-03-11. Last modified 2026-06-17.