CVE-2026-63427: Lenovo Software Fix

High severity, CVSS 7.8. EPSS: 0.2% chance of exploitation in the next 30 days.

An authentication bypass vulnerability was discovered in Lenovo Software Fix that could allow a local authenticated user to perform arbitrary code execution with elevated privileges.

Affected products

• Lenovo Software Fix: before 7.6.2.10 (fixed in 7.6.2.10)

Published 2026-09-10. Last modified 2026-09-15.