PT-2026-2962 · Lenovo · Thinkpad L16 Gen 2+3

Published 2026-01-14 · Updated 2026-01-15 · CVE-2026-0421

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Medium

Base vector

AV:L/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Lenovo ThinkPad L13 Gen 6 Lenovo ThinkPad L13 Gen 6 2-in-1 Lenovo ThinkPad L14 Gen 6 Lenovo ThinkPad L16 Gen 2

Description A potential issue exists in the BIOS of certain Lenovo ThinkPad models that may allow Secure Boot to be disabled, even when configured as “On” in the BIOS setup menu. This only affects systems where Secure Boot is set to User Mode.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Unchecked Return Value

Weakness Enumeration

CWE-252

Related Identifiers

CVE-2026-0421

Affected Products

Thinkpad L13 Gen 6

Thinkpad L13 Gen 6 2-In-1

Thinkpad L14 Gen 6

Thinkpad L16 Gen 2

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2026-0421 · Security Note
• https://support.lenovo.com/us/en/product_security/LEN-210688 · Note
• https://twitter.com/VulmonFeeds/status/2011725911771463750 · Twitter Post
• https://twitter.com/CVEnew/status/2011759591608954944 · Twitter Post