Public PoC Monitoring Flags New Elevation-of-Privilege CVEs in Windows and Lenovo Software

Public exploit monitoring feeds highlighted two newly listed elevation-of-privilege vulnerabilities: CVE-2026-26167 affecting Windows Push Notifications and CVE-2026-4145 affecting Lenovo Software Fix. Both entries were published through high-severity CVE tracking and tied to GitHub-based monitoring intended to identify newly public proof-of-concept repositories and exploit code.

The available details indicate the monitoring process scans GitHub for public exploit and PoC repositories, sorts matches by most recently updated, and limits output to the first 15 repositories for performance reasons. No threat actor, malware family, victim organization, exploitation evidence, or technical exploit details were provided in the referenced material, but the appearance of these CVEs in PoC-tracking feeds suggests defenders should watch for emerging exploit code and prioritize validation of exposure to the affected Windows and Lenovo components.