What’s Vulnerable › Vulnerabilities

CVE-2026-6511

• Severity: medium (CVSS 5.5 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.1% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2026-07-16 · updated 2026-10-24
• Weakness: CWE-306

Description

During an internal security assessment, a potential improper access control vulnerability was discovered in Lenovo Smart Connect for Windows that could allow a local authenticated user to access files owned by a different user on the same system.

Affected products

• Lenovo Smart Connect: before 09.0.2.003.000 — fixed in 09.0.2.003.000

How to fix

Upgrade to a fixed version: Lenovo Smart Connect 09.0.2.003.000. Check the vendor advisory for mitigations.

References

• https://support.lenovo.com/us/en/product_security/LEN-218281
• https://www.lenovo.com/us/en/software/smart-connect

Get alerted when CVE-2026-6511 or the next vulnerability affects your stack