CVE-2026-10590
A potential missing authentication vulnerability could allow a local privileged attacker to use...
A potential missing authentication vulnerability could allow a local privileged attacker to use WMI commands to arbitrarily trigger a System Management Interrupt handler.
Attack profile
How easy it is to exploit
- Attack vector
- Local
- Complexity
- Low
- Privileges needed
- High
- User interaction
- None
What an attacker can affect
- Confidentiality
- None
- Integrity
- High
- Availability
- None
Exploit likelihood
What each source reports
CVE List Score used
A potential missing authentication vulnerability could allow a local privileged attacker to use WMI commands to arbitrarily trigger a System Management Interrupt handler.
- Record
CVE-2026-10590- CVSS 4.0
- 6.7 Medium
CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N - CVSS 3.1
- 4.4 Medium
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N - Updated
- 2026-11-02
EUVDEUVD-2026-44982
A potential missing authentication vulnerability could allow a local privileged attacker to use WMI commands to arbitrarily trigger a System Management Interrupt handler.
- Record
EUVD-2026-44982- CVSS 4.0
- 6.7 Medium
CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N - Updated
- 2026-11-02
GitHub AdvisoriesGHSA-837q-rr3r-wp9q
A potential missing authentication vulnerability could allow a local privileged attacker to use...
A potential missing authentication vulnerability could allow a local privileged attacker to use WMI commands to arbitrarily trigger a System Management Interrupt handler.
- Record
GHSA-837q-rr3r-wp9q- CVSS 4.0
- 6.7 Medium
CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X - CVSS 3.1
- 4.4 Medium
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N - Updated
- 2026-11-02
NVD
A potential missing authentication vulnerability could allow a local privileged attacker to use WMI commands to arbitrarily trigger a System Management Interrupt handler.
- Record
CVE-2026-10590- CVSS 4.0
- 6.7 Medium
CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X - CVSS 3.1
- 4.4 Medium
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N - Updated
- 2026-11-02
Affected products
- lenovo ideapad 5 15aba7 bios
- lenovo ideapad pro 5 16agp11 bios
- lenovo ideapad pro 5 16asp10 bios
- lenovo ideapad pro 5 16iah10 bios
- lenovo ideapad pro 5 16imh9 bios
- lenovo ideapad pro 5 16iph11 bios
- lenovo ideapad pro 5 16irh8 bios
- lenovo ideapad slim 3 14itn9 bios
- lenovo ideapad slim 3 15amn8 bios
- lenovo ideapad slim 3 16arp10 bios
- lenovo ideapad slim 3 16irh10r bios
- lenovo ideapad slim 3 16irh8 bios
Show 45 moreShow less
- lenovo ideapad slim 3 16iru9 bios
- lenovo legion 5 15ahp10 bios
- lenovo legion 5 15akp10 bios
- lenovo legion 5 15aph9 bios
- lenovo legion 5 15iax10 bios
- lenovo legion 5 15irx10 bios
- lenovo legion 5 15irx9 bios
- lenovo legion 7 16agp11 bios
- lenovo legion 7 16iax10 bios
- lenovo legion 9 16irx9 bios
- lenovo legion pro 5 16adr10 bios
- lenovo legion pro 5 16afr10 bios
- lenovo legion pro 5 16arx8 bios
- lenovo legion pro 5 16iax10 bios
- lenovo legion pro 5 16irx10 bios
- lenovo legion pro 5 16irx9 bios
- lenovo legion pro 7 16adr10h bios
- lenovo legion pro 7 16afr10h bios
- lenovo legion pro 7 16arx8h bios
- lenovo legion pro 7 16iax10h bios
- lenovo legion pro 7 16irx9h bios
- lenovo legion slim 5 14aph8 bios
- lenovo s14 g3 iap bios
- lenovo v14 g6 itn bios
- lenovo v15 g2 ijl laptop bios
- lenovo v15 g4 amn bios
- lenovo v15 g4 iah bios
- lenovo v15 g5 irl bios
- lenovo v15 g6 arp bios
- lenovo loq 15arp10e bios
- lenovo loq 15iax9e bios
- lenovo thinkbook 16p g5 irx bios
- lenovo thinkbook 16p g6 adr bios
- lenovo thinkbook 16p g6 iax bios
- lenovo thinkbook plus g4 iru bios
- lenovo thinkbook plus g5 tab&thinkbook plus g5 station bios
- lenovo thinkbook plus g6 rollable bios
- lenovo yoga 9 14irp8 bios
- lenovo yoga 9 2-in-1 14ill10 bios
- lenovo yoga 9 2-in-1 14imh9 bios
- lenovo yoga book 9 13imu9 bios
- lenovo yoga book 9 14iah10 bios
- lenovo yoga pro 7 15iph11 bios
- lenovo yoga pro 9 14irp8 bios
- lenovo yoga pro 9 16imh9 bios
History
| Recorded | Changed | Sources |
|---|---|---|
| first indexed | CVE List, EUVD, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2026-10590 is a medium vulnerability (CVSS 6.7) in Lenovo Ideapad 5 15aba7 Bios, published July 16, 2026. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.17%, the 5th percentile. No source names a fixed version.