Log in Start free

Vulnerability · Published Oct 15, 2026 · Assigned by lenovo

CVE-2026-89057

Medium 6.8

In plain English

A medium-severity authentication bypass in Idea Tab/ Lenovo Tab K11 Gen 2 (TB336FU) from Lenovo. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.2% (higher than 9% of all known vulnerabilities).

Severity (CVSS 3.1)6.8Medium
Exploit odds (30 days)0.2%top 90.8% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known

Official description

A potential authentication bypass vulnerability was reported in some Lenovo tablets that could allow a user with physical access to gain unauthorized device access.

Affected products (as reported)

VendorProductVersions
Lenovo Idea Tab Pro (TB373FU) 0 – before 17.5.10.107
Lenovo Idea Tab/ Lenovo Tab K11 Gen 2 (TB336FU) 0 – before 17.5.10.348
Lenovo Idea Tab/ Lenovo Tab K11 Gen 2 (TB336FU/TB336ZU) 0 – before TB336FU：17.5.10.348 ,TB336ZU：17.5.10.354
Lenovo Idea Tab/ Lenovo Tab K11 Gen 2 (TB336ZU) 0 – before 17.5.10.354
Lenovo Legion Tab (8.8", 3) (TB321FU) 0 – before 17.5.10.319
Lenovo Tab M11 (TB330FU) 0 – before 17.0.135
Lenovo Tab M11 (TB330FU/TB330XU) 0 – before 17.0.517
Lenovo Tab M11 (TB330XU) 0 – before 17.0.517
Lenovo Tab Extreme (TB570FU) 0 – before 17.5.589
Lenovo Tab Extreme (TB570ZU) 0 – before 17.5.589
Lenovo Tab Extreme (TB570ZU/TB570FU) 0 – before 17.5.589
Lenovo Tab K11 (TB330FUP) 0 – before 17.0.135
Lenovo Tab K11 (TB330XUP) 0 – before 17.0.157
Lenovo Tab K11 Plus (TB352FU) 0 – before 17.0.10.344
Lenovo Tab K11 Plus (TB352XU) 0 – before 17.0.10.336
Lenovo Tab K11 Plus LTE ROW (TB352XU) 0 – before 17.0.10.336
Lenovo Tab K11 Plus WIFI ROW: TB352FU 0 – before 17.0.10.344
Lenovo Tab M10 5G (TB360ZU) 0 – before 16.0.939
Lenovo Tab K9 (TB305FU) 0 – before 17.0.10.324
Lenovo Tab K9 (TB305XU) 0 – before 17.0.10.318
Lenovo Tab One (TB305FU) 0 – before 17.0.10.324
Lenovo Tab One (TB305XU) 0 – before 17.0.10.254
Lenovo Tab P12 (TB370FU) 0 – before 17.0.352
Lenovo Tab P12 (TB370FU/TB372FU) 0 – before TB370FU：17.0.352, TB372FC：17.0.223
Lenovo Tab P12 (TB372FU) 0 – before 17.0.223
Lenovo Tab Plus (TB351FU) 0 – before 17.5.10.199
Lenovo Tab with Clear Case/ Lenovo Tab with Folio Case (TB311FU) 0 – before 17.5.36.417
Lenovo Tab with Clear Case/ Lenovo Tab with Folio Case (TB311FU/TB311XU) 0 – before TB311FU：17.5.36.417 ,TB311XU：17.5.37.350
Lenovo Tab with Clear Case/ Lenovo Tab with Folio Case (TB311XU) 0 – before 17.5.37.350
Lenovo Yoga Tab (TB710FU) 0 – before 17.5.04.082

Weakness: CWE-288 · Vector: CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

References