{"description":"Trending threats, MITRE ATT\u0026CK coverage, and detection metadata. Fed continuously.","favicon":"https://feed.craftedsignal.io/favicon-32x32.png","feed_url":"https://feed.craftedsignal.io/cpes/cpe2.3alenovofile_managerandroid/feed.json","home_page_url":"https://feed.craftedsignal.io/","icon":"https://feed.craftedsignal.io/apple-touch-icon.png","items":[{"_cs_actors":[],"_cs_cpes":["cpe:2.3:a:lenovo:file_manager:*:*:*:*:*:android:*:*"],"_cs_cves":[{"cvss":7.1,"id":"CVE-2026-18994"}],"_cs_exploited":false,"_cs_has_poc":false,"_cs_poc_references":[],"_cs_products":["File Manager (Chinese market distribution)"],"_cs_severities":["high"],"_cs_tags":["vulnerability","android","privilege-escalation"],"_cs_type":"advisory","_cs_vendors":["Lenovo"],"content_html":"\u003cp\u003eAn improper authorization vulnerability (CVE-2026-18994) has been identified in the Lenovo File Manager Android application. This vulnerability is specific to the version of the application distributed within the Chinese market. It allows a local, authenticated user to bypass existing authorization controls, granting them the ability to read or modify protected files maintained by the application. This could lead to unauthorized data exposure or manipulation of sensitive user data stored within the app's directory. Defenders should note that this is a local attack vector requiring the adversary to have already gained access to the mobile device or have an application running with sufficient permissions to interface with the Lenovo File Manager.\u003c/p\u003e\n\u003ch2 id=\"impact\"\u003eImpact\u003c/h2\u003e\n\u003cp\u003eThe vulnerability affects the Lenovo File Manager application distributed in the Chinese market. Successful exploitation allows a local user to gain unauthorized access to protected file resources, potentially resulting in data exfiltration or corruption. The CVSS base score for this vulnerability is 7.1.\u003c/p\u003e\n\u003ch2 id=\"recommendation\"\u003eRecommendation\u003c/h2\u003e\n\u003cp\u003ePrioritize the identification of Lenovo File Manager installations on mobile devices managed within the organization. Check for updates provided via the official vendor channels for the Chinese market and apply patches immediately. As this is a local privilege escalation vector, audit Android permissions and ensure that only trusted applications are installed on devices that have access to corporate data.\u003c/p\u003e\n","date_modified":"2026-09-10T23:10:25Z","date_published":"2026-09-10T23:10:25Z","id":"https://feed.craftedsignal.io/briefs/2026-09-lenovo-file-manager-vuln/","summary":"A local improper authorization vulnerability in the Lenovo File Manager Android app allows authenticated local users to read or modify protected application files.","title":"Improper Authorization Vulnerability in Lenovo File Manager Android App","url":"https://feed.craftedsignal.io/briefs/2026-09-lenovo-file-manager-vuln/"}],"language":"en","title":"CraftedSignal Threat Feed - Cpe:2.3:a:lenovo:file_manager:*:*:*:*:*:android:*:*","version":"https://jsonfeed.org/version/1.1"}