Lenovo Software Fix Auth Bypass Permitting Local Privilege Escalation
CVE-2026-63427 Published on September 10, 2026
An authentication bypass vulnerability was discovered in Lenovo Software Fix that could allow a local authenticated user to perform arbitrary code execution with elevated privileges.
Vulnerability Analysis
CVE-2026-63427 can be exploited with local system access, and requires small amount of user privileges. This vulnerability is considered to have a low attack complexity. The potential impact of an exploit of this vulnerability is considered to have no impact on confidentiality and integrity and availability.
Weakness Type
Authentication Bypass by Spoofing
This attack-focused weakness is caused by improperly implemented authentication schemes that are subject to spoofing attacks.
Products Associated with CVE-2026-63427
Want to know whenever a new CVE is published for Lenovo Software Fix? stack.watch will email you.
Affected Versions
Lenovo Software Fix:- Before 7.6.2.10 is affected.