CVE-2026-6090: Lenovo Smart Connect

High severity, CVSS 7.0. EPSS: 0.2% chance of exploitation in the next 30 days.

A potential authentication bypass was reported in Lenovo Smart Connect for Windows that could allow a local authenticated user to execute arbitrary code with elevated privileges.

Affected products

• Lenovo Smart Connect: before 09.0.2.003.000 (fixed in 09.0.2.003.000)

Published 2026-06-10. Last modified 2026-06-17.