CVE-2026-6387: Lenovo System Update

High severity, CVSS 7.0. EPSS: 0.2% chance of exploitation in the next 30 days.

A potential authentication bypass vulnerability was reported in Lenovo System Update that could allow a local authenticated user to execute arbitrary code with elevated privileges.

Affected products

• Lenovo System Update: before 5.08.04.85 (fixed in 5.08.04.85)

Published 2026-08-13. Last modified 2026-08-24.