CVE-2026-12036 [HIGH] – An improper link following vulnerability was reported in the VantageCoreAddin for Lenovo V

An improper link following vulnerability was reported in the VantageCoreAddin for Lenovo Vantage and Lenovo Commercial Vantage that could allow a local authenticated user to perform an arbitrary file deletion with elevated privileges.