LIVE · cybersecurity feed
Live wire
ASOS Breach Reveals the Risks in Customer-Facing SaaSUnpatched AhsayCBS flaws exploited to deploy webshells, mine cryptoAI Training Critical as Governance Challenges GrowUS Disrupts Chinese State-Sponsored Hacking ToolsCitrix warns admins to patch new NetScaler RCE flaw immediatelyCisco Patches a Dozen Critical VulnerabilitiesCisco warns of critical flaws allowing Nexus switch takeoverCVE-2026-21589 · Exploitation attempts against critical Atlassian flaw have begun (CVE-2026-21589)Cyber experts call on CISA to create mandatory federal OT rulesGremlin Foresight AI finds system weaknesses and verifies the fixes
vendor

Lenovo

9 CVEs published in the last four months and 1 stories. Exploited flaws first.

Critical0
High3
Medium5
Exploited (KEV)0

All recent CVEs

CVECVSSSeverityProductSummaryPublished
CVE-2026-23687.1highfilezAn improper certificate validation vulnerability was reported in the Lenovo Filez application that could allow a us223d ago
CVE-2026-17157.1highvantageAn input validation vulnerability was reported in the DeviceSettingsSystemAddin used in Lenovo Vantage and Lenovo B223d ago
CVE-2026-17167.1highvantageAn input validation vulnerability was reported in the DeviceSettingsSystemAddin used in Lenovo Vantage and Lenovo B223d ago
CVE-2026-16526.1mediumsmart connectA potential buffer overflow vulnerability was reported in the Lenovo Virtual Bus driver used in Smart Connect that 223d ago
CVE-2026-16535.5mediumsmart connectA potential divide by zero vulnerability was reported in the Lenovo Virtual Bus driver used in Smart Connect that c223d ago
CVE-2026-26405.5mediumpcmanagerDuring an internal security assessment, a potential vulnerability was discovered in Lenovo PC Manager that could al223d ago
CVE-2026-17175.5mediumvantageAn input validation vulnerability was reported in the LenovoProductivitySystemAddin used in Lenovo Vantage and Leno223d ago
CVE-2026-10685.3mediumfilezAn improper certificate validation vulnerability was reported in the Lenovo Filez application that could allow a us223d ago
CVE-2026-05202.8lowfilezA potential vulnerability was reported in the Lenovo FileZ Android application that, under certain conditions, coul223d ago

Filter the full tracker by Lenovo →

Our coverage of Lenovo

cloud

Legacy Lenovo login opens 5,000 Dropbox accounts to attackers

Dropbox has confirmed that approximately 5,000 user accounts were compromised due to an exploit involving a legacy login integration with Lenovo. The cloud storage provider stated that attackers leveraged an issue within Lenovo's email verification process to gain unauthorized access to these accounts.