CVE-2026-0421
CVE-2026-0421
Vexday Risk Score
21Bajo
Decisión SSVC (CISA)
Track
Sin señal de explotación → monitorear
CVSS 7EPSS 0.1%KEV nãoPoC —Nuclei —Metasploit —Patch —
Ciclo de vida
14 ene 2026Publicada en NVD
Recomendación: Monitorear — sin señal de explotación por ahora.
A potential vulnerability was reported in the BIOS of L13 Gen 6, L13 Gen 6 2-in-1, L14 Gen 6, and L16 Gen 2 ThinkPads which could result in Secure Boot being disabled even when configured as “On” in the BIOS setup menu. This issue only affects systems where Secure Boot is set to User Mode.
CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
Productos afectados
Lenovo · ThinkPad L13 Gen 6 2 in 1 BIOSLenovo · ThinkPad L13 Gen 6 BIOSLenovo · ThinkPad L14 Gen 6 BIOSLenovo · ThinkPad L16 Gen 2 BIOS¿Quieres saber si tu infraestructura está expuesta a esto?
Hablar con TrueHacking →