VULNERABILITY INTELLIGENCE
CVE-2026-0421
CVSS score6.5 MEDIUM
EPSS probability0.16%
CISA KEVNot currently listed
Published2026-01-14
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:L/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:H
Description
A potential vulnerability was reported in the BIOS of L13 Gen 6, L13 Gen 6 2-in-1, L14 Gen 6, and L16 Gen 2 ThinkPads which could result in Secure Boot being disabled even when configured as “On” in the BIOS setup menu. This issue only affects systems where Secure Boot is set to User Mode.
Weakness classification
- psirt@lenovo.com: CWE-252