# CVE-2026-10590: Lenovo BIOS missing authentication in SMI handler via WMI

Source: https://junglewise.ai/threats/cve-2026-10590-lenovo-bios-missing-authentication-in-smi-handler-via-wmi  
Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats  
Published: 2026-07-16. Updated: 2026-07-16  
License: CC BY 4.0 with a link back

CVE-2026-10590 · Severity: medium · CVSS 4.4 · Published 2026-07-16

A security vulnerability in the BIOS firmware of various Lenovo laptops could allow a user with administrative privileges to interfere with low-level system operations. By sending specific commands, an attacker could trigger system interrupts that are normally restricted, potentially compromising the integrity of the device's hardware management. This issue requires local access to the machine and high-level permissions to exploit.

Technologies: [Lenovo IdeaPad Pro 5 16AGP11 BIOS](https://junglewise.ai/threats/technologies/ideapad-pro-5-16agp11-bios), [Lenovo IdeaPad Pro 5 16IPH11 BIOS](https://junglewise.ai/threats/technologies/ideapad-pro-5-16iph11-bios), [Lenovo Legion 7 16AGP11 BIOS](https://junglewise.ai/threats/technologies/legion-7-16agp11-bios), [Lenovo Legion Pro 5 16ADR10 BIOS](https://junglewise.ai/threats/technologies/legion-pro-5-16adr10-bios), [Lenovo Legion Pro 5 16AFR10 BIOS](https://junglewise.ai/threats/technologies/legion-pro-5-16afr10-bios), [Lenovo Legion Pro 7 16ADR10H BIOS](https://junglewise.ai/threats/technologies/legion-pro-7-16adr10h-bios), [Lenovo Legion Pro 7 16AFR10H BIOS](https://junglewise.ai/threats/technologies/legion-pro-7-16afr10h-bios), [Lenovo LOQ 15ARP10E BIOS](https://junglewise.ai/threats/technologies/loq-15arp10e-bios), [Lenovo V15 G6 ARP BIOS](https://junglewise.ai/threats/technologies/v15-g6-arp-bios), [Lenovo Yoga Book 9 14IAH10 BIOS](https://junglewise.ai/threats/technologies/yoga-book-9-14iah10-bios), [Lenovo Yoga Pro 7 15IPH11 BIOS](https://junglewise.ai/threats/technologies/yoga-pro-7-15iph11-bios). Vendors: [Lenovo](https://junglewise.ai/threats/vendors/lenovo).

## Quick answers

**Is CVE-2026-10590 exploited in the wild?** No. Junglewise Threat Intelligence has no report of CVE-2026-10590 being exploited in the wild.

**How severe is CVE-2026-10590?** Medium severity, with a CVSS score of 4.4, published 16 July 2026.

**Which products and versions are affected?** Lenovo IdeaPad Pro 5 16AGP11 BIOS <= T8CN19WW; Lenovo IdeaPad Pro 5 16IPH11 BIOS < S4CN62WW; Lenovo Legion 7 16AGP11 BIOS <= TPCN27WW; Lenovo Legion Pro 5 16ADR10 BIOS <= U5CN07WW; and 7 more.

**Is there a fix for CVE-2026-10590?** No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.

**How is CVE-2026-10590 attacked?** It is attacked with local access, in device firmware.

**Am I affected by CVE-2026-10590?** Check whether you run Lenovo IdeaPad Pro 5 16AGP11 BIOS, Lenovo IdeaPad Pro 5 16IPH11 BIOS, Lenovo Legion 7 16AGP11 BIOS or one of the others listed at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

## Technical details

This vulnerability is classified as a missing authentication flaw within the BIOS WMI (Windows Management Instrumentation) interface. A local attacker with high privileges (Administrator/SYSTEM) can issue specific WMI commands to trigger a System Management Interrupt (SMI) handler without proper authorization checks. SMIs operate in System Management Mode (SMM), a highly privileged execution mode; unauthorized access to these handlers can lead to arbitrary code execution at the firmware level or bypass of hardware-based security protections. Lenovo has released BIOS updates for affected models to address this issue.

## Affected products

- Lenovo Yoga Pro 7 15IPH11 BIOS < TNCN37WW
- Lenovo IdeaPad Pro 5 16IPH11 BIOS < S4CN62WW
- Lenovo Legion 7 16AGP11 BIOS <= TPCN27WW
- Lenovo IdeaPad Pro 5 16AGP11 BIOS <= T8CN19WW
- Lenovo Legion Pro 5 16ADR10 BIOS <= U5CN07WW
- Lenovo Lenovo V15 G6 ARP BIOS <= TYCN15WW
- Lenovo LOQ 15ARP10E BIOS < SUCN18WW
- Lenovo Yoga Book 9 14IAH10 BIOS <= QEME23WW
- Lenovo Legion Pro 7 16AFR10H BIOS < SMCN20WW
- Lenovo Legion Pro 5 16AFR10 BIOS <= RECN14WW
- Lenovo Legion Pro 7 16ADR10H BIOS < SJCN17WW

## Timeline

- 2026-07-16: advisory: Initial disclosure by Lenovo and NVD publication

## References

- [https://support.lenovo.com/us/en/product_security/LEN-220440](https://support.lenovo.com/us/en/product_security/LEN-220440)

## Related threats

- [Lenovo BIOS out of bounds write in System Management Mode](https://junglewise.ai/threats/cve-2026-10589-lenovo-bios-out-of-bounds-write-in-system-management-mode)
- [Lenovo BIOS information disclosure in System Management Mode memory](https://junglewise.ai/threats/cve-2026-10588-lenovo-bios-information-disclosure-in-system-management-mode)
- [Lenovo BIOS out-of-bounds write in System Management Mode](https://junglewise.ai/threats/cve-2026-10587-lenovo-bios-out-of-bounds-write-in-system-management-mode)