CVE-2026-4135: Lenovo Software Fix

Medium severity, CVSS 6.6. EPSS: 0.2% chance of exploitation in the next 30 days.

During an internal security assessment, a potential vulnerability was discovered in Lenovo Software Fix, that during installation could allow a local authenticated user to perform an arbitrary file write with elevated privileges.

Affected products

• Lenovo Software Fix: before 7.5.5.19 (fixed in 7.5.5.19)

Published 2026-04-15. Last modified 2026-08-24.