CVE-2026-1715 | Lenovo Vantage/Baiying prior 1.0.8.15 DeviceSettingsSystemAddin argument injection

March 12, 2026 Yanac

A vulnerability, which was classified as critical, was found in Lenovo Vantage and Baiying. The impacted element is an unknown function of the component DeviceSettingsSystemAddin. Executing a manipulation can lead to argument injection.

This vulnerability is tracked as CVE-2026-1715. The attack is restricted to local execution. No exploit exists.

You should upgrade the affected component.VulDB Recent EntriesRead More