CVE-2026-0421
- State
- Published
- Severity
- 7.0 High
- Published
- Jan 14, 2026
- Updated
- Feb 26, 2026
- Reserved
- Dec 4, 2025
Description
A potential vulnerability was reported in the BIOS of L13 Gen 6, L13 Gen 6 2-in-1, L14 Gen 6, and L16 Gen 2 ThinkPads which could result in Secure Boot being disabled even when configured as “On” in the BIOS setup menu. This issue only affects systems where Secure Boot is set to User Mode.
Scores
| CVSS | Score | Vector | Source |
|---|---|---|---|
| 4.0 | 7.0 High | CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N | lenovo |
| 3.1 | 6.5 Medium | CVSS:3.1/AV:L/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:H | lenovo |
Weaknesses
- CWE-252 Unchecked Return Value
Affected Products
| Product | Versions |
|---|---|
ThinkPad L13 Gen 6 BIOSLenovo |
|
ThinkPad L13 Gen 6 2 in 1 BIOSLenovo |
|
ThinkPad L14 Gen 6 BIOSLenovo |
|
ThinkPad L16 Gen 2 BIOSLenovo |
|
References
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.