{"api_version":"1","generated_at":"2026-10-27T06:52:33+00:00","cve":"CVE-2026-89057","urls":{"html":"https://cve.report/CVE-2026-89057","api":"https://cve.report/api/cve/CVE-2026-89057.json","docs":"https://cve.report/api","cve_org":"https://www.cve.org/CVERecord?id=CVE-2026-89057","nvd":"https://nvd.nist.gov/vuln/detail/CVE-2026-89057"},"summary":{"title":"CVE-2026-89057","description":"A potential authentication bypass vulnerability was reported in some Lenovo tablets that could allow a user with physical access to gain unauthorized device access.","state":"PUBLISHED","assigner":"lenovo","published_at":"2026-10-16 00:17:06","updated_at":"2026-10-16 19:55:59"},"problem_types":["CWE-288","CWE-288 CWE-288: Authentication Bypass Using an Alternate Path or Channel"],"metrics":[{"version":"4.0","source":"psirt@lenovo.com","type":"Secondary","score":"7","severity":"HIGH","vector":"CVSS:4.0/AV:P/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","data":{"version":"4.0","vectorString":"CVSS:4.0/AV:P/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","baseScore":7,"baseSeverity":"HIGH","attackVector":"PHYSICAL","attackComplexity":"LOW","attackRequirements":"NONE","privilegesRequired":"NONE","userInteraction":"NONE","vulnConfidentialityImpact":"HIGH","vulnIntegrityImpact":"HIGH","vulnAvailabilityImpact":"HIGH","subConfidentialityImpact":"NONE","subIntegrityImpact":"NONE","subAvailabilityImpact":"NONE","exploitMaturity":"NOT_DEFINED","confidentialityRequirement":"NOT_DEFINED","integrityRequirement":"NOT_DEFINED","availabilityRequirement":"NOT_DEFINED","modifiedAttackVector":"NOT_DEFINED","modifiedAttackComplexity":"NOT_DEFINED","modifiedAttackRequirements":"NOT_DEFINED","modifiedPrivilegesRequired":"NOT_DEFINED","modifiedUserInteraction":"NOT_DEFINED","modifiedVulnConfidentialityImpact":"NOT_DEFINED","modifiedVulnIntegrityImpact":"NOT_DEFINED","modifiedVulnAvailabilityImpact":"NOT_DEFINED","modifiedSubConfidentialityImpact":"NOT_DEFINED","modifiedSubIntegrityImpact":"NOT_DEFINED","modifiedSubAvailabilityImpact":"NOT_DEFINED","Safety":"NOT_DEFINED","Automatable":"NOT_DEFINED","Recovery":"NOT_DEFINED","valueDensity":"NOT_DEFINED","vulnerabilityResponseEffort":"NOT_DEFINED","providerUrgency":"NOT_DEFINED"}},{"version":"4.0","source":"CNA","type":"CVSS","score":"7","severity":"HIGH","vector":"CVSS:4.0/AV:P/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N","data":{"Automatable":"NOT_DEFINED","Recovery":"NOT_DEFINED","Safety":"NOT_DEFINED","attackComplexity":"LOW","attackRequirements":"NONE","attackVector":"PHYSICAL","baseScore":7,"baseSeverity":"HIGH","exploitMaturity":"NOT_DEFINED","privilegesRequired":"NONE","providerUrgency":"NOT_DEFINED","subAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","subIntegrityImpact":"NONE","userInteraction":"NONE","valueDensity":"NOT_DEFINED","vectorString":"CVSS:4.0/AV:P/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N","version":"4.0","vulnAvailabilityImpact":"HIGH","vulnConfidentialityImpact":"HIGH","vulnIntegrityImpact":"HIGH","vulnerabilityResponseEffort":"NOT_DEFINED"}},{"version":"3.1","source":"psirt@lenovo.com","type":"Secondary","score":"6.8","severity":"MEDIUM","vector":"CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","data":{"version":"3.1","vectorString":"CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","baseScore":6.8,"baseSeverity":"MEDIUM","attackVector":"PHYSICAL","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"}},{"version":"3.1","source":"CNA","type":"CVSS","score":"6.8","severity":"MEDIUM","vector":"CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","data":{"attackComplexity":"LOW","attackVector":"PHYSICAL","availabilityImpact":"HIGH","baseScore":6.8,"baseSeverity":"MEDIUM","confidentialityImpact":"HIGH","integrityImpact":"HIGH","privilegesRequired":"NONE","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","version":"3.1"}}],"references":[{"url":"https://support.lenovo.com/us/en/product_security/LEN-218699","name":"https://support.lenovo.com/us/en/product_security/LEN-218699","refsource":"psirt@lenovo.com","tags":[],"title":"","mime":"","httpstatus":"","archivestatus":"0"},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-89057","name":"CVE Program record","refsource":"CVE.ORG","tags":["canonical"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-89057","name":"NVD vulnerability detail","refsource":"NVD","tags":["canonical","analysis"]}],"affected":[{"source":"CNA","vendor":"Lenovo","product":"Idea Tab Pro (TB373FU)","version":"affected 17.5.10.107 custom","platforms":[]},{"source":"CNA","vendor":"Lenovo","product":"Idea Tab/ Lenovo Tab K11 Gen 2 (TB336FU)","version":"affected 17.5.10.348 custom","platforms":[]},{"source":"CNA","vendor":"Lenovo","product":"Idea Tab/ Lenovo Tab K11 Gen 2 (TB336FU/TB336ZU)","version":"affected TB336FU：17.5.10.348 ,TB336ZU：17.5.10.354 custom","platforms":[]},{"source":"CNA","vendor":"Lenovo","product":"Idea Tab/ Lenovo Tab K11 Gen 2 (TB336ZU)","version":"affected 17.5.10.354 custom","platforms":[]},{"source":"CNA","vendor":"Lenovo","product":"Legion Tab (8.8\", 3) (TB321FU)","version":"affected 17.5.10.319 custom","platforms":[]},{"source":"CNA","vendor":"Lenovo","product":"Tab M11 (TB330FU)","version":"affected 17.0.135 custom","platforms":[]},{"source":"CNA","vendor":"Lenovo","product":"Tab M11 (TB330FU/TB330XU)","version":"affected 17.0.517 custom","platforms":[]},{"source":"CNA","vendor":"Lenovo","product":"Tab M11 (TB330XU)","version":"affected 17.0.517 custom","platforms":[]},{"source":"CNA","vendor":"Lenovo","product":"Tab Extreme (TB570FU)","version":"affected 17.5.589 custom","platforms":[]},{"source":"CNA","vendor":"Lenovo","product":"Tab Extreme (TB570ZU)","version":"affected 17.5.589 custom","platforms":[]},{"source":"CNA","vendor":"Lenovo","product":"Tab Extreme (TB570ZU/TB570FU)","version":"affected 17.5.589 custom","platforms":[]},{"source":"CNA","vendor":"Lenovo","product":"Tab K11 (TB330FUP)","version":"affected 17.0.135 custom","platforms":[]},{"source":"CNA","vendor":"Lenovo","product":"Tab K11 (TB330XUP)","version":"affected 17.0.157 custom","platforms":[]},{"source":"CNA","vendor":"Lenovo","product":"Tab K11 Plus (TB352FU)","version":"affected 17.0.10.344 custom","platforms":[]},{"source":"CNA","vendor":"Lenovo","product":"Tab K11 Plus (TB352XU)","version":"affected 17.0.10.336 custom","platforms":[]},{"source":"CNA","vendor":"Lenovo","product":"Tab K11 Plus LTE ROW (TB352XU)","version":"affected 17.0.10.336 custom","platforms":[]},{"source":"CNA","vendor":"Lenovo","product":"Tab K11 Plus WIFI ROW: TB352FU","version":"affected 17.0.10.344 custom","platforms":[]},{"source":"CNA","vendor":"Lenovo","product":"Tab M10 5G (TB360ZU)","version":"affected 16.0.939 custom","platforms":[]},{"source":"CNA","vendor":"Lenovo","product":"Tab K9 (TB305FU)","version":"affected 17.0.10.324 custom","platforms":[]},{"source":"CNA","vendor":"Lenovo","product":"Tab K9 (TB305XU)","version":"affected 17.0.10.318 custom","platforms":[]},{"source":"CNA","vendor":"Lenovo","product":"Tab One (TB305FU)","version":"affected 17.0.10.324 custom","platforms":[]},{"source":"CNA","vendor":"Lenovo","product":"Tab One (TB305XU)","version":"affected 17.0.10.254 custom","platforms":[]},{"source":"CNA","vendor":"Lenovo","product":"Tab P12 (TB370FU)","version":"affected 17.0.352 custom","platforms":[]},{"source":"CNA","vendor":"Lenovo","product":"Tab P12 (TB370FU/TB372FU)","version":"affected TB370FU：17.0.352, TB372FC：17.0.223 custom","platforms":[]},{"source":"CNA","vendor":"Lenovo","product":"Tab P12 (TB372FU)","version":"affected 17.0.223 custom","platforms":[]},{"source":"CNA","vendor":"Lenovo","product":"Tab Plus (TB351FU)","version":"affected 17.5.10.199 custom","platforms":[]},{"source":"CNA","vendor":"Lenovo","product":"Tab with Clear Case/ Lenovo Tab with Folio Case (TB311FU)","version":"affected 17.5.36.417 custom","platforms":[]},{"source":"CNA","vendor":"Lenovo","product":"Tab with Clear Case/ Lenovo Tab with Folio Case (TB311FU/TB311XU)","version":"affected TB311FU：17.5.36.417 ,TB311XU：17.5.37.350 custom","platforms":[]},{"source":"CNA","vendor":"Lenovo","product":"Tab with Clear Case/ Lenovo Tab with Folio Case (TB311XU)","version":"affected 17.5.37.350 custom","platforms":[]},{"source":"CNA","vendor":"Lenovo","product":"Yoga Tab (TB710FU)","version":"affected 17.5.04.082 custom","platforms":[]},{"source":"CNA","vendor":"Lenovo","product":"Yoga Tab Plus (TB520FU)","version":"affected 17.5.10.362 custom","platforms":[]}],"timeline":[],"solutions":[{"source":"CNA","title":"","value":"Update to the version (or higher) as recommended in the advisory - https://support.lenovo.com/us/en/product_security/LEN-218699","time":"","lang":"en"}],"workarounds":[],"exploits":[],"credits":[{"source":"CNA","value":"Lenovo thanks Deepak Toshniwal and Ayansh Toshniwal for reporting this issue.","lang":"en"}],"nvd_cpes":[],"vendor_comments":[],"enrichments":{"kev":null,"epss":{"cve_year":"2026","cve_id":"89057","cve":"CVE-2026-89057","epss":"0.002940000","percentile":"0.206080000","score_date":"2026-10-16","updated_at":"2026-10-17 00:14:15"},"legacy_qids":[]},"source_records":{"cve_program":{"containers":{"adp":[{"metrics":[{"other":{"content":{"id":"CVE-2026-89057","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"total"}],"role":"CISA Coordinator","timestamp":"2026-10-16T18:57:50.385384Z","version":"2.0.3"},"type":"ssvc"}}],"providerMetadata":{"dateUpdated":"2026-10-16T18:58:59.760Z","orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP"},"title":"CISA ADP Vulnrichment"}],"cna":{"affected":[{"defaultStatus":"unaffected","product":"Idea Tab Pro (TB373FU)","vendor":"Lenovo","versions":[{"lessThan":"17.5.10.107","status":"affected","version":"0","versionType":"custom"}]},{"defaultStatus":"unaffected","product":"Idea Tab/ Lenovo Tab K11 Gen 2 (TB336FU)","vendor":"Lenovo","versions":[{"lessThan":"17.5.10.348","status":"affected","version":"0","versionType":"custom"}]},{"defaultStatus":"unaffected","product":"Idea Tab/ Lenovo Tab K11 Gen 2 (TB336FU/TB336ZU)","vendor":"Lenovo","versions":[{"lessThan":"TB336FU：17.5.10.348 ,TB336ZU：17.5.10.354","status":"affected","version":"0","versionType":"custom"}]},{"defaultStatus":"unaffected","product":"Idea Tab/ Lenovo Tab K11 Gen 2 (TB336ZU)","vendor":"Lenovo","versions":[{"lessThan":"17.5.10.354","status":"affected","version":"0","versionType":"custom"}]},{"defaultStatus":"unaffected","product":"Legion Tab (8.8\", 3) (TB321FU)","vendor":"Lenovo","versions":[{"lessThan":"17.5.10.319","status":"affected","version":"0","versionType":"custom"}]},{"defaultStatus":"unaffected","product":"Tab M11 (TB330FU)","vendor":"Lenovo","versions":[{"lessThan":"17.0.135","status":"affected","version":"0","versionType":"custom"}]},{"defaultStatus":"unaffected","product":"Tab M11 (TB330FU/TB330XU)","vendor":"Lenovo","versions":[{"lessThan":"17.0.517","status":"affected","version":"0","versionType":"custom"}]},{"defaultStatus":"unaffected","product":"Tab M11 (TB330XU)","vendor":"Lenovo","versions":[{"lessThan":"17.0.517","status":"affected","version":"0","versionType":"custom"}]},{"defaultStatus":"unaffected","product":"Tab Extreme (TB570FU)","vendor":"Lenovo","versions":[{"lessThan":"17.5.589","status":"affected","version":"0","versionType":"custom"}]},{"defaultStatus":"unaffected","product":"Tab Extreme (TB570ZU)","vendor":"Lenovo","versions":[{"lessThan":"17.5.589","status":"affected","version":"0","versionType":"custom"}]},{"defaultStatus":"unaffected","product":"Tab Extreme (TB570ZU/TB570FU)","vendor":"Lenovo","versions":[{"lessThan":"17.5.589","status":"affected","version":"0","versionType":"custom"}]},{"defaultStatus":"unaffected","product":"Tab K11 (TB330FUP)","vendor":"Lenovo","versions":[{"lessThan":"17.0.135","status":"affected","version":"0","versionType":"custom"}]},{"defaultStatus":"unaffected","product":"Tab K11 (TB330XUP)","vendor":"Lenovo","versions":[{"lessThan":"17.0.157","status":"affected","version":"0","versionType":"custom"}]},{"defaultStatus":"unaffected","product":"Tab K11 Plus (TB352FU)","vendor":"Lenovo","versions":[{"lessThan":"17.0.10.344","status":"affected","version":"0","versionType":"custom"}]},{"defaultStatus":"unaffected","product":"Tab K11 Plus (TB352XU)","vendor":"Lenovo","versions":[{"lessThan":"17.0.10.336","status":"affected","version":"0","versionType":"custom"}]},{"defaultStatus":"unaffected","product":"Tab K11 Plus LTE ROW (TB352XU)","vendor":"Lenovo","versions":[{"lessThan":"17.0.10.336","status":"affected","version":"0","versionType":"custom"}]},{"defaultStatus":"unaffected","product":"Tab K11 Plus WIFI ROW: TB352FU","vendor":"Lenovo","versions":[{"lessThan":"17.0.10.344","status":"affected","version":"0","versionType":"custom"}]},{"defaultStatus":"unaffected","product":"Tab M10 5G (TB360ZU)","vendor":"Lenovo","versions":[{"lessThan":"16.0.939","status":"affected","version":"0","versionType":"custom"}]},{"defaultStatus":"unaffected","product":"Tab K9 (TB305FU)","vendor":"Lenovo","versions":[{"lessThan":"17.0.10.324","status":"affected","version":"0","versionType":"custom"}]},{"defaultStatus":"unaffected","product":"Tab K9 (TB305XU)","vendor":"Lenovo","versions":[{"lessThan":"17.0.10.318","status":"affected","version":"0","versionType":"custom"}]},{"defaultStatus":"unaffected","product":"Tab One (TB305FU)","vendor":"Lenovo","versions":[{"lessThan":"17.0.10.324","status":"affected","version":"0","versionType":"custom"}]},{"defaultStatus":"unaffected","product":"Tab One (TB305XU)","vendor":"Lenovo","versions":[{"lessThan":"17.0.10.254","status":"affected","version":"0","versionType":"custom"}]},{"defaultStatus":"unaffected","product":"Tab P12 (TB370FU)","vendor":"Lenovo","versions":[{"lessThan":"17.0.352","status":"affected","version":"0","versionType":"custom"}]},{"defaultStatus":"unaffected","product":"Tab P12 (TB370FU/TB372FU)","vendor":"Lenovo","versions":[{"lessThan":"TB370FU：17.0.352, TB372FC：17.0.223","status":"affected","version":"0","versionType":"custom"}]},{"defaultStatus":"unaffected","product":"Tab P12 (TB372FU)","vendor":"Lenovo","versions":[{"lessThan":"17.0.223","status":"affected","version":"0","versionType":"custom"}]},{"defaultStatus":"unaffected","product":"Tab Plus (TB351FU)","vendor":"Lenovo","versions":[{"lessThan":"17.5.10.199","status":"affected","version":"0","versionType":"custom"}]},{"defaultStatus":"unaffected","product":"Tab with Clear Case/ Lenovo Tab with Folio Case (TB311FU)","vendor":"Lenovo","versions":[{"lessThan":"17.5.36.417","status":"affected","version":"0","versionType":"custom"}]},{"defaultStatus":"unaffected","product":"Tab with Clear Case/ Lenovo Tab with Folio Case (TB311FU/TB311XU)","vendor":"Lenovo","versions":[{"lessThan":"TB311FU：17.5.36.417 ,TB311XU：17.5.37.350","status":"affected","version":"0","versionType":"custom"}]},{"defaultStatus":"unaffected","product":"Tab with Clear Case/ Lenovo Tab with Folio Case (TB311XU)","vendor":"Lenovo","versions":[{"lessThan":"17.5.37.350","status":"affected","version":"0","versionType":"custom"}]},{"defaultStatus":"unaffected","product":"Yoga Tab (TB710FU)","vendor":"Lenovo","versions":[{"lessThan":"17.5.04.082","status":"affected","version":"0","versionType":"custom"}]},{"defaultStatus":"unaffected","product":"Yoga Tab Plus (TB520FU)","vendor":"Lenovo","versions":[{"lessThan":"17.5.10.362","status":"affected","version":"0","versionType":"custom"}]}],"cpeApplicability":[{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:a:lenovo:idea_tab_pro_tb373fu_:*:*:*:*:*:*:*:*","versionEndExcluding":"17.5.10.107","versionStartIncluding":"0","vulnerable":true}],"negate":false,"operator":"OR"},{"cpeMatch":[{"criteria":"cpe:2.3:a:lenovo:idea_tab_lenovo_tab_k11_gen_2_tb336fu_:*:*:*:*:*:*:*:*","versionEndExcluding":"17.5.10.348","versionStartIncluding":"0","vulnerable":true}],"negate":false,"operator":"OR"},{"cpeMatch":[{"criteria":"cpe:2.3:a:lenovo:idea_tab_lenovo_tab_k11_gen_2_tb336fu_tb336zu_:*:*:*:*:*:*:*:*","versionEndExcluding":"tb336fu_17.5.10.348_tb336zu_17.5.10.354","versionStartIncluding":"0","vulnerable":true}],"negate":false,"operator":"OR"},{"cpeMatch":[{"criteria":"cpe:2.3:a:lenovo:idea_tab_lenovo_tab_k11_gen_2_tb336zu_:*:*:*:*:*:*:*:*","versionEndExcluding":"17.5.10.354","versionStartIncluding":"0","vulnerable":true}],"negate":false,"operator":"OR"},{"cpeMatch":[{"criteria":"cpe:2.3:a:lenovo:legion_tab_8.8_3_tb321fu_:*:*:*:*:*:*:*:*","versionEndExcluding":"17.5.10.319","versionStartIncluding":"0","vulnerable":true}],"negate":false,"operator":"OR"},{"cpeMatch":[{"criteria":"cpe:2.3:a:lenovo:tab_m11_tb330fu_:*:*:*:*:*:*:*:*","versionEndExcluding":"17.0.135","versionStartIncluding":"0","vulnerable":true}],"negate":false,"operator":"OR"},{"cpeMatch":[{"criteria":"cpe:2.3:a:lenovo:tab_m11_tb330fu_tb330xu_:*:*:*:*:*:*:*:*","versionEndExcluding":"17.0.517","versionStartIncluding":"0","vulnerable":true}],"negate":false,"operator":"OR"},{"cpeMatch":[{"criteria":"cpe:2.3:a:lenovo:tab_m11_tb330xu_:*:*:*:*:*:*:*:*","versionEndExcluding":"17.0.517","versionStartIncluding":"0","vulnerable":true}],"negate":false,"operator":"OR"},{"cpeMatch":[{"criteria":"cpe:2.3:a:lenovo:tab_extreme_tb570fu_:*:*:*:*:*:*:*:*","versionEndExcluding":"17.5.589","versionStartIncluding":"0","vulnerable":true}],"negate":false,"operator":"OR"},{"cpeMatch":[{"criteria":"cpe:2.3:a:lenovo:tab_extreme_tb570zu_:*:*:*:*:*:*:*:*","versionEndExcluding":"17.5.589","versionStartIncluding":"0","vulnerable":true}],"negate":false,"operator":"OR"},{"cpeMatch":[{"criteria":"cpe:2.3:a:lenovo:tab_extreme_tb570zu_tb570fu_:*:*:*:*:*:*:*:*","versionEndExcluding":"17.5.589","versionStartIncluding":"0","vulnerable":true}],"negate":false,"operator":"OR"},{"cpeMatch":[{"criteria":"cpe:2.3:a:lenovo:tab_k11_tb330fup_:*:*:*:*:*:*:*:*","versionEndExcluding":"17.0.135","versionStartIncluding":"0","vulnerable":true}],"negate":false,"operator":"OR"},{"cpeMatch":[{"criteria":"cpe:2.3:a:lenovo:tab_k11_tb330xup_:*:*:*:*:*:*:*:*","versionEndExcluding":"17.0.157","versionStartIncluding":"0","vulnerable":true}],"negate":false,"operator":"OR"},{"cpeMatch":[{"criteria":"cpe:2.3:a:lenovo:tab_k11_plus_tb352fu_:*:*:*:*:*:*:*:*","versionEndExcluding":"17.0.10.344","versionStartIncluding":"0","vulnerable":true}],"negate":false,"operator":"OR"},{"cpeMatch":[{"criteria":"cpe:2.3:a:lenovo:tab_k11_plus_tb352xu_:*:*:*:*:*:*:*:*","versionEndExcluding":"17.0.10.336","versionStartIncluding":"0","vulnerable":true}],"negate":false,"operator":"OR"},{"cpeMatch":[{"criteria":"cpe:2.3:a:lenovo:tab_k11_plus_lte_row_tb352xu_:*:*:*:*:*:*:*:*","versionEndExcluding":"17.0.10.336","versionStartIncluding":"0","vulnerable":true}],"negate":false,"operator":"OR"},{"cpeMatch":[{"criteria":"cpe:2.3:a:lenovo:tab_k11_plus_wifi_row_tb352fu:*:*:*:*:*:*:*:*","versionEndExcluding":"17.0.10.344","versionStartIncluding":"0","vulnerable":true}],"negate":false,"operator":"OR"},{"cpeMatch":[{"criteria":"cpe:2.3:a:lenovo:tab_m10_5g_tb360zu_:*:*:*:*:*:*:*:*","versionEndExcluding":"16.0.939","versionStartIncluding":"0","vulnerable":true}],"negate":false,"operator":"OR"},{"cpeMatch":[{"criteria":"cpe:2.3:a:lenovo:tab_k9_tb305fu_:*:*:*:*:*:*:*:*","versionEndExcluding":"17.0.10.324","versionStartIncluding":"0","vulnerable":true}],"negate":false,"operator":"OR"},{"cpeMatch":[{"criteria":"cpe:2.3:a:lenovo:tab_k9_tb305xu_:*:*:*:*:*:*:*:*","versionEndExcluding":"17.0.10.318","versionStartIncluding":"0","vulnerable":true}],"negate":false,"operator":"OR"},{"cpeMatch":[{"criteria":"cpe:2.3:a:lenovo:tab_one_tb305fu_:*:*:*:*:*:*:*:*","versionEndExcluding":"17.0.10.324","versionStartIncluding":"0","vulnerable":true}],"negate":false,"operator":"OR"},{"cpeMatch":[{"criteria":"cpe:2.3:a:lenovo:tab_one_tb305xu_:*:*:*:*:*:*:*:*","versionEndExcluding":"17.0.10.254","versionStartIncluding":"0","vulnerable":true}],"negate":false,"operator":"OR"},{"cpeMatch":[{"criteria":"cpe:2.3:a:lenovo:tab_p12_tb370fu_:*:*:*:*:*:*:*:*","versionEndExcluding":"17.0.352","versionStartIncluding":"0","vulnerable":true}],"negate":false,"operator":"OR"},{"cpeMatch":[{"criteria":"cpe:2.3:a:lenovo:tab_p12_tb370fu_tb372fu_:*:*:*:*:*:*:*:*","versionEndExcluding":"tb370fu_17.0.352_tb372fc_17.0.223","versionStartIncluding":"0","vulnerable":true}],"negate":false,"operator":"OR"},{"cpeMatch":[{"criteria":"cpe:2.3:a:lenovo:tab_p12_tb372fu_:*:*:*:*:*:*:*:*","versionEndExcluding":"17.0.223","versionStartIncluding":"0","vulnerable":true}],"negate":false,"operator":"OR"},{"cpeMatch":[{"criteria":"cpe:2.3:a:lenovo:tab_plus_tb351fu_:*:*:*:*:*:*:*:*","versionEndExcluding":"17.5.10.199","versionStartIncluding":"0","vulnerable":true}],"negate":false,"operator":"OR"},{"cpeMatch":[{"criteria":"cpe:2.3:a:lenovo:tab_with_clear_case_lenovo_tab_with_folio_case_tb311fu_:*:*:*:*:*:*:*:*","versionEndExcluding":"17.5.36.417","versionStartIncluding":"0","vulnerable":true}],"negate":false,"operator":"OR"},{"cpeMatch":[{"criteria":"cpe:2.3:a:lenovo:tab_with_clear_case_lenovo_tab_with_folio_case_tb311fu_tb311xu_:*:*:*:*:*:*:*:*","versionEndExcluding":"tb311fu_17.5.36.417_tb311xu_17.5.37.350","versionStartIncluding":"0","vulnerable":true}],"negate":false,"operator":"OR"},{"cpeMatch":[{"criteria":"cpe:2.3:a:lenovo:tab_with_clear_case_lenovo_tab_with_folio_case_tb311xu_:*:*:*:*:*:*:*:*","versionEndExcluding":"17.5.37.350","versionStartIncluding":"0","vulnerable":true}],"negate":false,"operator":"OR"},{"cpeMatch":[{"criteria":"cpe:2.3:a:lenovo:yoga_tab_tb710fu_:*:*:*:*:*:*:*:*","versionEndExcluding":"17.5.04.082","versionStartIncluding":"0","vulnerable":true}],"negate":false,"operator":"OR"},{"cpeMatch":[{"criteria":"cpe:2.3:a:lenovo:yoga_tab_plus_tb520fu_:*:*:*:*:*:*:*:*","versionEndExcluding":"17.5.10.362","versionStartIncluding":"0","vulnerable":true}],"negate":false,"operator":"OR"}],"operator":"OR"}],"credits":[{"lang":"en","type":"finder","value":"Lenovo thanks Deepak Toshniwal and Ayansh Toshniwal for reporting this issue."}],"descriptions":[{"lang":"en","supportingMedia":[{"base64":false,"type":"text/html","value":"A potential authentication bypass vulnerability was reported in some Lenovo tablets that could allow a user with physical access to gain unauthorized device access."}],"value":"A potential authentication bypass vulnerability was reported in some Lenovo tablets that could allow a user with physical access to gain unauthorized device access."}],"metrics":[{"cvssV4_0":{"Automatable":"NOT_DEFINED","Recovery":"NOT_DEFINED","Safety":"NOT_DEFINED","attackComplexity":"LOW","attackRequirements":"NONE","attackVector":"PHYSICAL","baseScore":7,"baseSeverity":"HIGH","exploitMaturity":"NOT_DEFINED","privilegesRequired":"NONE","providerUrgency":"NOT_DEFINED","subAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","subIntegrityImpact":"NONE","userInteraction":"NONE","valueDensity":"NOT_DEFINED","vectorString":"CVSS:4.0/AV:P/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N","version":"4.0","vulnAvailabilityImpact":"HIGH","vulnConfidentialityImpact":"HIGH","vulnIntegrityImpact":"HIGH","vulnerabilityResponseEffort":"NOT_DEFINED"},"format":"CVSS","scenarios":[{"lang":"en","value":"GENERAL"}]},{"cvssV3_1":{"attackComplexity":"LOW","attackVector":"PHYSICAL","availabilityImpact":"HIGH","baseScore":6.8,"baseSeverity":"MEDIUM","confidentialityImpact":"HIGH","integrityImpact":"HIGH","privilegesRequired":"NONE","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","version":"3.1"},"format":"CVSS","scenarios":[{"lang":"en","value":"GENERAL"}]}],"problemTypes":[{"descriptions":[{"cweId":"CWE-288","description":"CWE-288: Authentication Bypass Using an Alternate Path or Channel","lang":"en","type":"CWE"}]}],"providerMetadata":{"dateUpdated":"2026-10-15T23:17:37.340Z","orgId":"da227ddf-6e25-4b41-b023-0f976dcaca4b","shortName":"lenovo"},"references":[{"tags":["vendor-advisory"],"url":"https://support.lenovo.com/us/en/product_security/LEN-218699"}],"solutions":[{"lang":"en","supportingMedia":[{"base64":false,"type":"text/html","value":"Update to the version (or higher) as recommended in the advisory - https://support.lenovo.com/us/en/product_security/LEN-218699"}],"value":"Update to the version (or higher) as recommended in the advisory - https://support.lenovo.com/us/en/product_security/LEN-218699"}],"source":{"discovery":"UNKNOWN"},"x_generator":{"engine":"Vulnogram 1.0.0-beta"}}},"cveMetadata":{"assignerOrgId":"da227ddf-6e25-4b41-b023-0f976dcaca4b","assignerShortName":"lenovo","cveId":"CVE-2026-89057","datePublished":"2026-10-15T23:17:37.340Z","dateReserved":"2026-09-10T18:11:51.160Z","dateUpdated":"2026-10-16T18:58:59.760Z","state":"PUBLISHED"},"dataType":"CVE_RECORD","dataVersion":"5.2"},"nvd":{"publishedDate":"2026-10-16 00:17:06","lastModifiedDate":"2026-10-16 19:55:59","problem_types":["CWE-288","CWE-288 CWE-288: Authentication Bypass Using an Alternate Path or Channel"],"metrics":{"cvssMetricV40":[{"source":"psirt@lenovo.com","type":"Secondary","cvssData":{"version":"4.0","vectorString":"CVSS:4.0/AV:P/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","baseScore":7,"baseSeverity":"HIGH","attackVector":"PHYSICAL","attackComplexity":"LOW","attackRequirements":"NONE","privilegesRequired":"NONE","userInteraction":"NONE","vulnConfidentialityImpact":"HIGH","vulnIntegrityImpact":"HIGH","vulnAvailabilityImpact":"HIGH","subConfidentialityImpact":"NONE","subIntegrityImpact":"NONE","subAvailabilityImpact":"NONE","exploitMaturity":"NOT_DEFINED","confidentialityRequirement":"NOT_DEFINED","integrityRequirement":"NOT_DEFINED","availabilityRequirement":"NOT_DEFINED","modifiedAttackVector":"NOT_DEFINED","modifiedAttackComplexity":"NOT_DEFINED","modifiedAttackRequirements":"NOT_DEFINED","modifiedPrivilegesRequired":"NOT_DEFINED","modifiedUserInteraction":"NOT_DEFINED","modifiedVulnConfidentialityImpact":"NOT_DEFINED","modifiedVulnIntegrityImpact":"NOT_DEFINED","modifiedVulnAvailabilityImpact":"NOT_DEFINED","modifiedSubConfidentialityImpact":"NOT_DEFINED","modifiedSubIntegrityImpact":"NOT_DEFINED","modifiedSubAvailabilityImpact":"NOT_DEFINED","Safety":"NOT_DEFINED","Automatable":"NOT_DEFINED","Recovery":"NOT_DEFINED","valueDensity":"NOT_DEFINED","vulnerabilityResponseEffort":"NOT_DEFINED","providerUrgency":"NOT_DEFINED"}}],"cvssMetricV31":[{"source":"psirt@lenovo.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","baseScore":6.8,"baseSeverity":"MEDIUM","attackVector":"PHYSICAL","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":0.9,"impactScore":5.9}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2026-10-16T18:57:50.385384Z","id":"CVE-2026-89057","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"configurations":[]},"legacy_mitre":{"record":{"CveYear":"2026","CveId":"89057","Ordinal":"1","Title":"CVE-2026-89057","CVE":"CVE-2026-89057","Year":"2026"},"notes":[{"CveYear":"2026","CveId":"89057","Ordinal":"1","NoteData":"A potential authentication bypass vulnerability was reported in some Lenovo tablets that could allow a user with physical access to gain unauthorized device access.","Type":"Description","Title":"CVE-2026-89057"}]}}}