All vulnerabilities
CVE-2026-89057

A potential authentication bypass vulnerability was reported in some Lenovo tablets that could allow a user with physical access to gain unauthorized device access.

Lenovo Idea Tab Pro (TB373FU)
Open in ThreatlineRecord JSON
CVSS
7.0High
ExploitationNo known exploitationNot in CISA KEV, which does not prove it is unexploitedCISA KEV
Exploit odds (EPSS)0.29%Chance of exploitation activity in the next 30 days, higher than 20% of CVEs. Scored 23 Oct 2026FIRST EPSS
Fixed in17.5.10.107Also 17.5.10.348, 17.5.10.354 and 18 moreCVE List
Published15 Oct 2026Updated 16 Oct 2026CVE List

What fixes it

  • 17.5.10.107Idea Tab Pro (TB373FU)CVE List
  • 17.5.10.348Idea Tab/ Lenovo Tab K11 Gen 2 (TB336FU)CVE List
  • 17.5.10.354Idea Tab/ Lenovo Tab K11 Gen 2 (TB336ZU)CVE List
  • 17.5.10.319Legion Tab (8.8", 3) (TB321FU)CVE List
  • 17.0.135Tab M11 (TB330FU)CVE List
  • 17.0.517Tab M11 (TB330FU/TB330XU)CVE List
Show all 28 fixed versions
  • 17.0.517Tab M11 (TB330XU)CVE List
  • 17.5.589Tab Extreme (TB570FU)CVE List
  • 17.5.589Tab Extreme (TB570ZU)CVE List
  • 17.5.589Tab Extreme (TB570ZU/TB570FU)CVE List
  • 17.0.135Tab K11 (TB330FUP)CVE List
  • 17.0.157Tab K11 (TB330XUP)CVE List
  • 17.0.10.344Tab K11 Plus (TB352FU)CVE List
  • 17.0.10.336Tab K11 Plus (TB352XU)CVE List
  • 17.0.10.336Tab K11 Plus LTE ROW (TB352XU)CVE List
  • 17.0.10.344Tab K11 Plus WIFI ROW: TB352FUCVE List
  • 16.0.939Tab M10 5G (TB360ZU)CVE List
  • 17.0.10.324Tab K9 (TB305FU)CVE List
  • 17.0.10.318Tab K9 (TB305XU)CVE List
  • 17.0.10.324Tab One (TB305FU)CVE List
  • 17.0.10.254Tab One (TB305XU)CVE List
  • 17.0.352Tab P12 (TB370FU)CVE List
  • 17.0.223Tab P12 (TB372FU)CVE List
  • 17.5.10.199Tab Plus (TB351FU)CVE List
  • 17.5.36.417Tab with Clear Case/ Lenovo Tab with Folio Case (TB311FU)CVE List
  • 17.5.37.350Tab with Clear Case/ Lenovo Tab with Folio Case (TB311XU)CVE List
  • 17.5.04.082Yoga Tab (TB710FU)CVE List
  • 17.5.10.362Yoga Tab Plus (TB520FU)CVE List

A fixed version on one release line is not the upgrade target for every line. Check your exact version and any vendor backports.

Affected versions 31

  • Idea Tab Pro (TB373FU)affected: all versions before 17.5.10.107CVE List
  • Idea Tab/ Lenovo Tab K11 Gen 2 (TB336FU)affected: all versions before 17.5.10.348CVE List
  • Idea Tab/ Lenovo Tab K11 Gen 2 (TB336FU/TB336ZU)affected: all versions before TB336FU：17.5.10.348 ,TB336ZU：17.5.10.354CVE List
  • Idea Tab/ Lenovo Tab K11 Gen 2 (TB336ZU)affected: all versions before 17.5.10.354CVE List
  • Legion Tab (8.8", 3) (TB321FU)affected: all versions before 17.5.10.319CVE List
  • Tab M11 (TB330FU)affected: all versions before 17.0.135CVE List
  • Tab M11 (TB330FU/TB330XU)affected: all versions before 17.0.517CVE List
  • Tab M11 (TB330XU)affected: all versions before 17.0.517CVE List
  • Tab Extreme (TB570FU)affected: all versions before 17.5.589CVE List
  • Tab Extreme (TB570ZU)affected: all versions before 17.5.589CVE List
  • Tab Extreme (TB570ZU/TB570FU)affected: all versions before 17.5.589CVE List
  • Tab K11 (TB330FUP)affected: all versions before 17.0.135CVE List
  • Tab K11 (TB330XUP)affected: all versions before 17.0.157CVE List
  • Tab K11 Plus (TB352FU)affected: all versions before 17.0.10.344CVE List
  • Tab K11 Plus (TB352XU)affected: all versions before 17.0.10.336CVE List
  • Tab K11 Plus LTE ROW (TB352XU)affected: all versions before 17.0.10.336CVE List
  • Tab K11 Plus WIFI ROW: TB352FUaffected: all versions before 17.0.10.344CVE List
  • Tab M10 5G (TB360ZU)affected: all versions before 16.0.939CVE List
  • Tab K9 (TB305FU)affected: all versions before 17.0.10.324CVE List
  • Tab K9 (TB305XU)affected: all versions before 17.0.10.318CVE List
  • Tab One (TB305FU)affected: all versions before 17.0.10.324CVE List
  • Tab One (TB305XU)affected: all versions before 17.0.10.254CVE List
  • Tab P12 (TB370FU)affected: all versions before 17.0.352CVE List
  • Tab P12 (TB370FU/TB372FU)affected: all versions before TB370FU：17.0.352, TB372FC：17.0.223CVE List
  • Tab P12 (TB372FU)affected: all versions before 17.0.223CVE List
  • Tab Plus (TB351FU)affected: all versions before 17.5.10.199CVE List
  • Tab with Clear Case/ Lenovo Tab with Folio Case (TB311FU)affected: all versions before 17.5.36.417CVE List
  • Tab with Clear Case/ Lenovo Tab with Folio Case (TB311FU/TB311XU)affected: all versions before TB311FU：17.5.36.417 ,TB311XU：17.5.37.350CVE List
  • Tab with Clear Case/ Lenovo Tab with Folio Case (TB311XU)affected: all versions before 17.5.37.350CVE List
  • Yoga Tab (TB710FU)affected: all versions before 17.5.04.082CVE List
  • Yoga Tab Plus (TB520FU)affected: all versions before 17.5.10.362CVE List

References 1