CVE-2026-12036: Lenovo Vantage

High severity, CVSS 7.1. EPSS: 0.2% chance of exploitation in the next 30 days.

An improper link following vulnerability was reported in the VantageCoreAddin for Lenovo Vantage and Lenovo Commercial Vantage that could allow a local authenticated user to perform an arbitrary file deletion with elevated privileges.

Affected products

• Lenovo Vantage: before 1.1.0.51 (fixed in 1.1.0.51)

Published 2026-08-13. Last modified 2026-08-24.