Is CVE-2026-6387 being exploited?

No public exploit is currently tracked.

How severe is CVE-2026-6387?

CVE-2026-6387 has a CVSS v3 severity of HIGH (7).

Back

CVE-2026-6387

Description

A potential authentication bypass vulnerability was reported in Lenovo System Update that could allow a local authenticated user to execute arbitrary code with elevated privileges.