CVE-2026-6281

A potential vulnerability was reported in some Lenovo Personal Cloud Storage devices that could allow a remote authenticated user on the local network to execute arbitrary commands on the device.

Score

CVSS 3.1 8.8 High

Status

Awaiting Analysis - psirt@lenovo.com

Published

2026-05-13

Last modified

2026-10-26

Weaknesses

CWE-78

Affected products

• Home Storage Hub T20 (Lenovo)
• Home Storage Hub X20 (Lenovo)
• Personal Cloud A1 (Lenovo)
• Personal Cloud A1s (Lenovo)
• Personal Cloud T1 (Lenovo)
• Personal Cloud T2 (Lenovo)
• Personal Cloud T2pro (Lenovo)
• Personal Cloud T2s (Lenovo)
• Personal Cloud X1 (Lenovo)
• Personal Cloud X1s (Lenovo)

References

• https://iknow.lenovo.com.cn/detail/440274
• https://pc.lenovo.com.cn/tips/Ann/t1_eol.html