What’s Vulnerable › Vulnerabilities

CVE-2026-2640

• Severity: medium (CVSS 5.5 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.1% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2026-03-11 · updated 2026-08-24
• Weakness: CWE-269

Description

During an internal security assessment, a potential vulnerability was discovered in Lenovo PC Manager that could allow a local authenticated user to terminate privileged processes.

Affected products

• Lenovo PC Manager: before 5.1.160.12302 — fixed in 5.1.160.12302

How to fix

Upgrade to a fixed version: Lenovo PC Manager 5.1.160.12302. Check the vendor advisory for mitigations.

References

• https://iknow.lenovo.com.cn/detail/438816

Get alerted when CVE-2026-2640 or the next vulnerability affects your stack