CVE-2026-0421
Published: Jan 14, 2026
Modified: Feb 26, 2026
CVSS v3.1
6.5
Description
A potential vulnerability was reported in the BIOS of L13 Gen 6, L13 Gen 6 2-in-1, L14 Gen 6, and L16 Gen 2 ThinkPads which could result in Secure Boot being disabled even when configured as “On” in the BIOS setup menu. This issue only affects systems where Secure Boot is set to User Mode.
| Vendor | Product | Versions |
|---|---|---|
Lenovo | ThinkPad L13 Gen 6 BIOS | affected 0 - < 1.10 |
Lenovo | ThinkPad L13 Gen 6 2 in 1 BIOS | affected 0 - < 1.10 |
Lenovo | ThinkPad L14 Gen 6 BIOS | affected 0 - < 1.06 |
Lenovo | ThinkPad L16 Gen 2 BIOS | affected 0 - < 1.06 |
Weaknesses (CWE)
CVSS v3.1 Details
CVSS v3.1 Vector
CVSS:3.1/AV:L/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:H
Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality
Integrity
Availability
Security Training
Train your team to recognize and prevent security threats with our comprehensive security awareness program.
Start TrainingVulnerability Scanning
Discover vulnerabilities in your applications and infrastructure before attackers do.
Scan Now