🔐 CVE Alert

CVE-2026-89057

MEDIUM 6.8
CVSS Score
6.8
EPSS Score
0.0%
EPSS Percentile
0th

A potential authentication bypass vulnerability was reported in some Lenovo tablets that could allow a user with physical access to gain unauthorized device access.

CWE CWE-288
Vendor lenovo
Product idea tab pro (tb373fu)
Published Oct 15, 2026
Stay Ahead of the Next One

Get instant alerts for lenovo idea tab pro (tb373fu)

Be the first to know when new medium vulnerabilities affecting lenovo idea tab pro (tb373fu) are published — delivered to Slack, Telegram or Discord.

Get Free Alerts → Free · No credit card · 60 sec setup

CVSS v3 Breakdown

CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Attack Vector
Physical
Attack Complexity
Low
Privileges Required
None
User Interaction
None
Scope
Unchanged
Confidentiality
High
Integrity
High
Availability
High

Affected Versions

Lenovo / Idea Tab Pro (TB373FU)
0 < 17.5.10.107
Lenovo / Idea Tab/ Lenovo Tab K11 Gen 2 (TB336FU)
0 < 17.5.10.348
Lenovo / Idea Tab/ Lenovo Tab K11 Gen 2 (TB336FU/TB336ZU)
0 < TB336FU:17.5.10.348 ,TB336ZU:17.5.10.354
Lenovo / Idea Tab/ Lenovo Tab K11 Gen 2 (TB336ZU)
0 < 17.5.10.354
Lenovo / Legion Tab (8.8", 3) (TB321FU)
0 < 17.5.10.319
Lenovo / Tab M11 (TB330FU)
0 < 17.0.135
Lenovo / Tab M11 (TB330FU/TB330XU)
0 < 17.0.517
Lenovo / Tab M11 (TB330XU)
0 < 17.0.517
Lenovo / Tab Extreme (TB570FU)
0 < 17.5.589
Lenovo / Tab Extreme (TB570ZU)
0 < 17.5.589
Lenovo / Tab Extreme (TB570ZU/TB570FU)
0 < 17.5.589
Lenovo / Tab K11 (TB330FUP)
0 < 17.0.135
Lenovo / Tab K11 (TB330XUP)
0 < 17.0.157
Lenovo / Tab K11 Plus (TB352FU)
0 < 17.0.10.344
Lenovo / Tab K11 Plus (TB352XU)
0 < 17.0.10.336
Lenovo / Tab K11 Plus LTE ROW (TB352XU)
0 < 17.0.10.336
Lenovo / Tab K11 Plus WIFI ROW: TB352FU
0 < 17.0.10.344
Lenovo / Tab M10 5G (TB360ZU)
0 < 16.0.939
Lenovo / Tab K9 (TB305FU)
0 < 17.0.10.324
Lenovo / Tab K9 (TB305XU)
0 < 17.0.10.318
Lenovo / Tab One (TB305FU)
0 < 17.0.10.324
Lenovo / Tab One (TB305XU)
0 < 17.0.10.254
Lenovo / Tab P12 (TB370FU)
0 < 17.0.352
Lenovo / Tab P12 (TB370FU/TB372FU)
0 < TB370FU:17.0.352, TB372FC:17.0.223
Lenovo / Tab P12 (TB372FU)
0 < 17.0.223
Lenovo / Tab Plus (TB351FU)
0 < 17.5.10.199
Lenovo / Tab with Clear Case/ Lenovo Tab with Folio Case (TB311FU)
0 < 17.5.36.417
Lenovo / Tab with Clear Case/ Lenovo Tab with Folio Case (TB311FU/TB311XU)
0 < TB311FU:17.5.36.417 ,TB311XU:17.5.37.350
Lenovo / Tab with Clear Case/ Lenovo Tab with Folio Case (TB311XU)
0 < 17.5.37.350
Lenovo / Yoga Tab (TB710FU)
0 < 17.5.04.082
Lenovo / Yoga Tab Plus (TB520FU)
0 < 17.5.10.362

References

NVD ↗ CVE.org ↗ EPSS Data ↗
support.lenovo.com: https://support.lenovo.com/us/en/product_security/LEN-218699

Credits

Lenovo thanks Deepak Toshniwal and Ayansh Toshniwal for reporting this issue.