PT-2026-33056 · Lenovo · Hardwarescanaddin+1

Published 2026-04-15 · Updated 2026-04-16 · CVE-2026-0827

Positive Technologies (AI Summary)

CVSS v3.1

7.1

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H

Name of the Vulnerable Software and Affected Versions Lenovo Diagnostics (affected versions not specified) Lenovo Vantage HardwareScanAddin (affected versions not specified)

Description An issue exists in Lenovo Diagnostics and the HardwareScanAddin used in Lenovo Vantage. During installation or while performing a hardware scan, a local authenticated user could perform an arbitrary file write with elevated privileges. Arbitrary file write is a condition where an attacker can write files to any location on the disk, potentially leading to system compromise.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Link Following

Weakness Enumeration

CWE-59

Related Identifiers

CVE-2026-0827

Affected Products

Hardwarescanaddin

Lenovo Diagnostics

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2026-0827 · Security Note
• https://twitter.com/CVEnew/status/2044737986261127497 · Twitter Post
• https://twitter.com/VulmonFeeds/status/2044461812490305890 · Twitter Post
• https://support.lenovo.com/us/en/product_security/LEN-210693 · Note