Is CVE-2026-10590 exploited in the wild?

No. Junglewise Threat Intelligence has no report of CVE-2026-10590 being exploited in the wild.

How severe is CVE-2026-10590?

Medium severity, with a CVSS score of 4.4, published 16 July 2026.

Which products and versions are affected?

Lenovo IdeaPad Pro 5 16AGP11 BIOS <= T8CN19WW; Lenovo IdeaPad Pro 5 16IPH11 BIOS < S4CN62WW; Lenovo Legion 7 16AGP11 BIOS <= TPCN27WW; Lenovo Legion Pro 5 16ADR10 BIOS <= U5CN07WW; and 7 more.

Is there a fix for CVE-2026-10590?

No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.

How is CVE-2026-10590 attacked?

It is attacked with local access, in device firmware.

Am I affected by CVE-2026-10590?

Check whether you run Lenovo IdeaPad Pro 5 16AGP11 BIOS, Lenovo IdeaPad Pro 5 16IPH11 BIOS, Lenovo Legion 7 16AGP11 BIOS or one of the others listed at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

CVE-2026-10590: Lenovo BIOS missing authentication in SMI handler via WMI

Q: Is there a fix for CVE-2026-10590?

No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.

Q: How is CVE-2026-10590 attacked?

It is attacked with local access, in device firmware.

Q: Am I affected by CVE-2026-10590?

Check whether you run Lenovo IdeaPad Pro 5 16AGP11 BIOS, Lenovo IdeaPad Pro 5 16IPH11 BIOS, Lenovo Legion 7 16AGP11 BIOS or one of the others listed at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

CVE-2026-10590 · Severity: medium · CVSS 4.4 · Published 2026-07-16

A security vulnerability in the BIOS firmware of various Lenovo laptops could allow a user with administrative privileges to interfere with low-level system operations. By sending specific commands, an attacker could trigger system interrupts that are normally restricted, potentially compromising the integrity of the device's hardware management. This issue requires local access to the machine and high-level permissions to exploit.

Technologies: Lenovo IdeaPad Pro 5 16AGP11 BIOS, Lenovo IdeaPad Pro 5 16IPH11 BIOS, Lenovo Legion 7 16AGP11 BIOS, Lenovo Legion Pro 5 16ADR10 BIOS, Lenovo Legion Pro 5 16AFR10 BIOS, Lenovo Legion Pro 7 16ADR10H BIOS, Lenovo Legion Pro 7 16AFR10H BIOS, Lenovo LOQ 15ARP10E BIOS, Lenovo V15 G6 ARP BIOS, Lenovo Yoga Book 9 14IAH10 BIOS, Lenovo Yoga Pro 7 15IPH11 BIOS. Vendors: Lenovo.

Quick answers

Is CVE-2026-10590 exploited in the wild?: No. Junglewise Threat Intelligence has no report of CVE-2026-10590 being exploited in the wild.
How severe is CVE-2026-10590?: Medium severity, with a CVSS score of 4.4, published 16 July 2026.
Which products and versions are affected?: Lenovo IdeaPad Pro 5 16AGP11 BIOS <= T8CN19WW; Lenovo IdeaPad Pro 5 16IPH11 BIOS < S4CN62WW; Lenovo Legion 7 16AGP11 BIOS <= TPCN27WW; Lenovo Legion Pro 5 16ADR10 BIOS <= U5CN07WW; and 7 more.
Is there a fix for CVE-2026-10590?: No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.
How is CVE-2026-10590 attacked?: It is attacked with local access, in device firmware.
Am I affected by CVE-2026-10590?: Check whether you run Lenovo IdeaPad Pro 5 16AGP11 BIOS, Lenovo IdeaPad Pro 5 16IPH11 BIOS, Lenovo Legion 7 16AGP11 BIOS or one of the others listed at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

Technical details

This vulnerability is classified as a missing authentication flaw within the BIOS WMI (Windows Management Instrumentation) interface. A local attacker with high privileges (Administrator/SYSTEM) can issue specific WMI commands to trigger a System Management Interrupt (SMI) handler without proper authorization checks. SMIs operate in System Management Mode (SMM), a highly privileged execution mode; unauthorized access to these handlers can lead to arbitrary code execution at the firmware level or bypass of hardware-based security protections. Lenovo has released BIOS updates for affected models to address this issue.

Affected products

Lenovo Yoga Pro 7 15IPH11 BIOS < TNCN37WW
Lenovo IdeaPad Pro 5 16IPH11 BIOS < S4CN62WW
Lenovo Legion 7 16AGP11 BIOS <= TPCN27WW
Lenovo IdeaPad Pro 5 16AGP11 BIOS <= T8CN19WW
Lenovo Legion Pro 5 16ADR10 BIOS <= U5CN07WW
Lenovo Lenovo V15 G6 ARP BIOS <= TYCN15WW
Lenovo LOQ 15ARP10E BIOS < SUCN18WW
Lenovo Yoga Book 9 14IAH10 BIOS <= QEME23WW
Lenovo Legion Pro 7 16AFR10H BIOS < SMCN20WW
Lenovo Legion Pro 5 16AFR10 BIOS <= RECN14WW
Lenovo Legion Pro 7 16ADR10H BIOS < SJCN17WW

Timeline

2026-07-16: advisory: Initial disclosure by Lenovo and NVD publication

References

https://support.lenovo.com/us/en/product_security/LEN-220440

This page as Markdown. Free to reuse under CC BY 4.0 with a link back.