Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%
Buy Us a Coffee

CVE-2026-89057

Quick assessment

Affected
Lenovo Idea Tab Pro (TB373FU)
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.

据报道，某些联想平板电脑中存在潜在的认证绕过漏洞，可能允许具有物理访问权限的用户未经授权地访问设备。

CVSS 6.8 · Medium EPSS 0.29% · P21

Affected Version Matrix 31

VendorProduct Version RangeStatus
Lenovo Idea Tab Pro (TB373FU) < 17.5.10.107 affected
Lenovo Idea Tab/ Lenovo Tab K11 Gen 2 (TB336FU) < 17.5.10.348 affected
Lenovo Idea Tab/ Lenovo Tab K11 Gen 2 (TB336FU/TB336ZU) < TB336FU：17.5.10.348 ,TB336ZU：17.5.10.354 affected
Lenovo Idea Tab/ Lenovo Tab K11 Gen 2 (TB336ZU) < 17.5.10.354 affected
Lenovo Legion Tab (8.8", 3) (TB321FU) < 17.5.10.319 affected
Lenovo Tab Extreme (TB570FU) < 17.5.589 affected
Lenovo Tab Extreme (TB570ZU) < 17.5.589 affected
Lenovo Tab Extreme (TB570ZU/TB570FU) < 17.5.589 affected
Lenovo Tab K11 (TB330FUP) < 17.0.135 affected
Lenovo Tab K11 (TB330XUP) < 17.0.157 affected
Lenovo Tab K11 Plus (TB352FU) < 17.0.10.344 affected
Lenovo Tab K11 Plus (TB352XU) < 17.0.10.336 affected
Lenovo Tab K11 Plus LTE ROW (TB352XU) < 17.0.10.336 affected
Lenovo Tab K11 Plus WIFI ROW: TB352FU < 17.0.10.344 affected
Lenovo Tab K9 (TB305FU) < 17.0.10.324 affected
Lenovo Tab K9 (TB305XU) < 17.0.10.318 affected
Lenovo Tab M10 5G (TB360ZU) < 16.0.939 affected
Lenovo Tab M11 (TB330FU) < 17.0.135 affected
Lenovo Tab M11 (TB330FU/TB330XU) < 17.0.517 affected
Lenovo Tab M11 (TB330XU) < 17.0.517 affected
Lenovo Tab One (TB305FU) < 17.0.10.324 affected
Lenovo Tab One (TB305XU) < 17.0.10.254 affected
Lenovo Tab P12 (TB370FU) < 17.0.352 affected
Lenovo Tab P12 (TB370FU/TB372FU) < TB370FU：17.0.352, TB372FC：17.0.223 affected
Lenovo Tab P12 (TB372FU) < 17.0.223 affected
Lenovo Tab Plus (TB351FU) < 17.5.10.199 affected
Lenovo Tab with Clear Case/ Lenovo Tab with Folio Case (TB311FU) < 17.5.36.417 affected
Lenovo Tab with Clear Case/ Lenovo Tab with Folio Case (TB311FU/TB311XU) < TB311FU：17.5.36.417 ,TB311XU：17.5.37.350 affected
Lenovo Tab with Clear Case/ Lenovo Tab with Folio Case (TB311XU) < 17.5.37.350 affected
Lenovo Yoga Tab (TB710FU) < 17.5.04.082 affected
Lenovo Yoga Tab Plus (TB520FU) < 17.5.10.362 affected
Get alerts for future matching vulnerabilities Log in to subscribe

I. Basic Information for CVE-2026-89057

Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
N/A
Source: CVE Program / CVE List V5
Vulnerability Description
A potential authentication bypass vulnerability was reported in some Lenovo tablets that could allow a user with physical access to gain unauthorized device access.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Source: CVE Program / CVE List V5
Vulnerability Type
使用候选路径或通道进行的认证绕过
Source: CVE Program / CVE List V5

Affected Products

Vendor Product Affected Versions CPE Subscribe
Lenovo Idea Tab Pro (TB373FU) 0 ~ 17.5.10.107 -
Lenovo Idea Tab/ Lenovo Tab K11 Gen 2 (TB336FU) 0 ~ 17.5.10.348 -
Lenovo Idea Tab/ Lenovo Tab K11 Gen 2 (TB336FU/TB336ZU) 0 ~ TB336FU：17.5.10.348 ,TB336ZU：17.5.10.354 -
Lenovo Idea Tab/ Lenovo Tab K11 Gen 2 (TB336ZU) 0 ~ 17.5.10.354 -
Lenovo Legion Tab (8.8", 3) (TB321FU) 0 ~ 17.5.10.319 -
Lenovo Tab M11 (TB330FU) 0 ~ 17.0.135 -
Lenovo Tab M11 (TB330FU/TB330XU) 0 ~ 17.0.517 -
Lenovo Tab M11 (TB330XU) 0 ~ 17.0.517 -
Lenovo Tab Extreme (TB570FU) 0 ~ 17.5.589 -
Lenovo Tab Extreme (TB570ZU) 0 ~ 17.5.589 -
Lenovo Tab Extreme (TB570ZU/TB570FU) 0 ~ 17.5.589 -
Lenovo Tab K11 (TB330FUP) 0 ~ 17.0.135 -
Lenovo Tab K11 (TB330XUP) 0 ~ 17.0.157 -
Lenovo Tab K11 Plus (TB352FU) 0 ~ 17.0.10.344 -
Lenovo Tab K11 Plus (TB352XU) 0 ~ 17.0.10.336 -
Lenovo Tab K11 Plus LTE ROW (TB352XU) 0 ~ 17.0.10.336 -
Lenovo Tab K11 Plus WIFI ROW: TB352FU 0 ~ 17.0.10.344 -
Lenovo Tab M10 5G (TB360ZU) 0 ~ 16.0.939 -
Lenovo Tab K9 (TB305FU) 0 ~ 17.0.10.324 -
Lenovo Tab K9 (TB305XU) 0 ~ 17.0.10.318 -
Lenovo Tab One (TB305FU) 0 ~ 17.0.10.324 -
Lenovo Tab One (TB305XU) 0 ~ 17.0.10.254 -
Lenovo Tab P12 (TB370FU) 0 ~ 17.0.352 -
Lenovo Tab P12 (TB370FU/TB372FU) 0 ~ TB370FU：17.0.352, TB372FC：17.0.223 -
Lenovo Tab P12 (TB372FU) 0 ~ 17.0.223 -
Lenovo Tab Plus (TB351FU) 0 ~ 17.5.10.199 -
Lenovo Tab with Clear Case/ Lenovo Tab with Folio Case (TB311FU) 0 ~ 17.5.36.417 -
Lenovo Tab with Clear Case/ Lenovo Tab with Folio Case (TB311FU/TB311XU) 0 ~ TB311FU：17.5.36.417 ,TB311XU：17.5.37.350 -
Lenovo Tab with Clear Case/ Lenovo Tab with Folio Case (TB311XU) 0 ~ 17.5.37.350 -
Lenovo Yoga Tab (TB710FU) 0 ~ 17.5.04.082 -

II. Public POCs for CVE-2026-89057

# POC Description Source Link Shenlong Link
AI-Generated POC Premium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2026-89057

请登录查看更多情报信息。

Vendor Advisories for CVE-2026-89057 (1)

Same Patch Batch · Lenovo · 2026-10-15 · 7 CVEs total

CVE-2026-75941 8.0 HIGH 联想Legion Zone应用远程代码执行漏洞
CVE-2026-92629 7.3 HIGH 联想百应PC客户端越权执行任意代码漏洞
CVE-2026-92777 6.4 MEDIUM 联想平板解锁后物理访问执行代码漏洞
CVE-2026-89062 5.5 MEDIUM 联想能源管理驱动越界写入致蓝屏
CVE-2026-16755 5.3 MEDIUM 联想C33智能摄像头信息泄露漏洞
CVE-2026-16754 4.8 MEDIUM 联想C33摄像头证书验证漏洞

IV. Related Vulnerabilities

Same product: Idea Tab Pro (TB373FU)
Same vendor: Lenovo
Same weakness: CWE-288

V. Comments for CVE-2026-89057

No comments yet

Leave a comment