What is CVE-2026-63426?

CVE-2026-63426 is a high-severity vulnerability in Lenovo Dock Manager, classified under Improper Link Resolution Before File Access. CVSS score: 7.1/10. Published 2026-08-13.

How severe is CVE-2026-63426?

High severity. CVSS v3 base score is 7.1 out of 10.

Vulnerability in Lenovo Dock Manager

CVE-2026-63426

During an internal security assessment, a potential vulnerability was discovered in Lenovo Dock Manager that could allow an authenticated local user to perform an arbitrary file deletion with elevated privileges.

CVSS v3 metric

CVSS v3 base score 7.1 (High). Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H.

Affected products

Lenovo Dock Manager — versions 0

Weakness classification (CWE)

CWE-59 — Improper Link Resolution Before File Access

References

psirt@lenovo.com (vendor-advisory)
psirt@lenovo.com (product, patch)

Frequently asked questions

What is CVE-2026-63426?: CVE-2026-63426 is a high-severity vulnerability in Lenovo Dock Manager, classified under Improper Link Resolution Before File Access. CVSS score: 7.1/10. Published 2026-08-13.
How severe is CVE-2026-63426?: High severity. CVSS v3 base score is 7.1 out of 10.