CVE-2026-0421highCWE-252

CVE-2026-0421: high-severity vulnerability in Lenovo ThinkPad L13 Gen 6 2 in 1 BIOS

Published · Updated

Follow this CVE+ Monitor ThinkPad L13 Gen 6 2 in 1 BIOS+ Monitor ThinkPad L13 Gen 6 BIOS

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

21Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 7epss 0.2%
A potential vulnerability was reported in the BIOS of L13 Gen 6, L13 Gen 6 2-in-1, L14 Gen 6, and L16 Gen 2 ThinkPads which could result in Secure Boot being disabled even when configured as “On” in the BIOS setup menu. This issue only affects systems where Secure Boot is set to User Mode.
CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
Affected products
Lenovo · ThinkPad L13 Gen 6 2 in 1 BIOSLenovo · ThinkPad L13 Gen 6 BIOSLenovo · ThinkPad L14 Gen 6 BIOSLenovo · ThinkPad L16 Gen 2 BIOS