CVE-2026-10590

Description

A potential missing authentication vulnerability could allow a local privileged attacker to use WMI commands to arbitrarily trigger a System Management Interrupt handler.

CVSS Vector

References

• https://support.lenovo.com/us/en/product_security/LEN-220440