PT-2026-48451 · Lenovo · Smart Connect

Published 2026-06-10 · Updated 2026-06-10 · CVE-2026-6090

Mitre

CVSS v3.1

7.0

High

Base vector

AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

A potential authentication bypass was reported in Lenovo Smart Connect for Windows that could allow a local authenticated user to execute arbitrary code with elevated privileges.

Fix

Authentication Bypass by Spoofing

Weakness Enumeration

CWE-290

Related Identifiers

CVE-2026-6090

Affected Products

Smart Connect

References · 2

• https://nvd.nist.gov/vuln/detail/CVE-2026-6090 · Security Note
• https://support.lenovo.com/us/en/product_security/LEN-218281 · Note