Lenovo Commercial Vantage vulnerabilities

4 CVEs affecting Lenovo Commercial Vantage, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2026-15994, published 2026-08-13.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2025-6232, published 2025-07-17. High severity, CVSS 7.8. EPSS: 0.2% chance of exploitation in the next 30 days. An improper validation vulnerability was reported in Lenovo Vantage that under certain conditions could allow a local attacker to execute code with elevated permissions by modifying specific registry…
CVE-2025-6231, published 2025-07-17. High severity, CVSS 7.8. EPSS: 0.2% chance of exploitation in the next 30 days. An improper validation vulnerability was reported in Lenovo Vantage that under certain conditions could allow a local attacker to execute code with elevated permissions by modifying an application…
CVE-2025-6230, published 2025-07-17. Medium severity, CVSS 5.3. EPSS: 0.2% chance of exploitation in the next 30 days. A SQL injection vulnerability was reported in Lenovo Vantage that could allow a local attacker to modify the local SQLite database and execute limited SQLite commands.
CVE-2026-15994, published 2026-08-13. High severity, CVSS 7.0. EPSS: 0.2% chance of exploitation in the next 30 days. During an internal security assessment, an improper link following vulnerability was identified in Lenovo Vantage and Lenovo Commercial Vantage that could allow a local authenticated user to execute…