CVE-2026-10590

A potential missing authentication vulnerability could allow a local privileged attacker to use WMI commands to arbitrarily trigger a System Management Interrupt handler.

Score
CVSS 4.0 6.7 Medium
Status
Awaiting Analysis - psirt@lenovo.com
Published
2026-07-16
Last modified
2026-07-16

Affected products

References