Local File Deletion Vulnerability in Lenovo Dock Manager
CVE-2026-63426

6.9MEDIUM

Key Information:

Vendor

Lenovo
Status
Dock Manager
Vendor
CVE Published:
13 August 2026

What is CVE-2026-63426?

A security assessment uncovered a vulnerability in Lenovo Dock Manager that could potentially permit an authenticated local user to delete arbitrary files with elevated privileges. This flaw can lead to unauthorized modification or loss of important data, necessitating prompt attention and remediation.

Affected Version(s)

Dock Manager 0 < 1.6.5.3

References

https://support.lenovo.com/us/en/product_security/LEN-223470
vendor-advisory
https://support.lenovo.com/us/en/solutions/ht037099#dm
productpatch

CVSS V4

Score:
6.9
Severity:
MEDIUM
Confidentiality:
None
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.