CVE-2026-12036

The VantageCoreAddin for Lenovo Vantage and Lenovo Commercial Vantage is vulnerable to an improper link following issue, enabling a local authenticated user to delete arbitrary files with elevated privileges. This flaw poses a significant risk as it could lead to unauthorized data manipulation or loss. Organizations using these products should prioritize remediation to mitigate potential exploitation by malicious insiders.