{"id":"CVE-2026-0421","url":"https://www.cyber-defence.io/tools/cve/CVE-2026-0421","generatedAt":"2026-10-28T00:16:59.119Z","title":"A potential vulnerability was reported in the BIOS of L13 Gen 6, L13 Gen 6 2-in-1, L14 Gen 6, and L16 Gen 2 ThinkPads which could result in Secure Boot being disabled even when configured as “On” in the BIOS setup menu.","description":"A potential vulnerability was reported in the BIOS of L13 Gen 6, L13 Gen 6 2-in-1, L14 Gen 6, and L16 Gen 2 ThinkPads which could result in Secure Boot being disabled even when configured as “On” in the BIOS setup menu. This issue only affects systems where Secure Boot is set to User Mode.","published":"2026-01-14T23:15:56.000Z","lastModified":"2026-06-17T10:10:49.000Z","status":"Deferred","sourceIdentifier":"psirt@lenovo.com","cvss":{"version":"4.0","score":7,"severity":"HIGH","vector":"CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/M"},"cwe":["CWE-252"],"affected":[],"epss":{"score":0.00163,"percentile":0.05513,"date":"2026-10-26","history":[]},"kev":{"listed":false},"exploits":{"count":0,"verified":false,"firstPublished":null,"source":"Exploit-DB (https://gitlab.com/exploit-database/exploitdb)","entries":[]},"verdict":{"level":"high","text":"High impact if exploited, but EPSS currently rates exploitation as unlikely (0.16%). Schedule it in the normal patch cycle and watch for a rise in EPSS or a public exploit."},"changes":[],"references":[{"url":"https://support.lenovo.com/us/en/product_security/LEN-210688","source":"psirt@lenovo.com"}],"sources":{"nvd":"https://nvd.nist.gov/vuln/detail/CVE-2026-0421","epss":"https://www.first.org/epss/","kev":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog","exploitdb":"https://www.exploit-db.com/"},"licence":"CC BY 4.0 — link back to the CVE Explorer if you publish the results; upstream data remains subject to its own terms."}