CVE-2026-890576.8MediumCWE-288

CVE-2026-89057: Lenovo Idea Tab Pro (TB373FU) vulnerability

Lenovo · Idea Tab Pro (TB373FU)

Vendor fix available · Affected: Lenovo Idea Tab Pro (TB373FU) · Exploitation: unlikely (under 1%)

Not in CyberSIXT coverage yet: no article names this CVE. This page shows the public record.

0.2%probability of exploitation in the next 30 days

9th percentile

050100

Higher than 9% of scored CVEs

6.8MediumCVSS 3.1

LowMediumHighCrit.

DescriptionCVE.org

A potential authentication bypass vulnerability was reported in some Lenovo tablets that could allow a user with physical access to gain unauthorized device access.

Affected products20

From the CVE record. A product or version that is not listed is unknown, not unaffected.

Lenovo · Idea Tab Pro (TB373FU)before 17.5.10.107
Lenovo · Idea Tab/ Lenovo Tab K11 Gen 2 (TB336FU)before 17.5.10.348
Lenovo · Idea Tab/ Lenovo Tab K11 Gen 2 (TB336FU/TB336ZU)before TB336FU：17.5.10.348 ,TB336ZU：17.5.10.354
Lenovo · Idea Tab/ Lenovo Tab K11 Gen 2 (TB336ZU)before 17.5.10.354
Lenovo · Legion Tab (8.8", 3) (TB321FU)before 17.5.10.319
Lenovo · Tab M11 (TB330FU)before 17.0.135
Lenovo · Tab M11 (TB330FU/TB330XU)before 17.0.517
Lenovo · Tab M11 (TB330XU)before 17.0.517
Lenovo · Tab Extreme (TB570FU)before 17.5.589
Lenovo · Tab Extreme (TB570ZU)before 17.5.589
Lenovo · Tab Extreme (TB570ZU/TB570FU)before 17.5.589
Lenovo · Tab K11 (TB330FUP)before 17.0.135
Lenovo · Tab K11 (TB330XUP)before 17.0.157
Lenovo · Tab K11 Plus (TB352FU)before 17.0.10.344
Lenovo · Tab K11 Plus (TB352XU)before 17.0.10.336
Lenovo · Tab K11 Plus LTE ROW (TB352XU)before 17.0.10.336
Lenovo · Tab K11 Plus WIFI ROW: TB352FUbefore 17.0.10.344
Lenovo · Tab M10 5G (TB360ZU)before 16.0.939
Lenovo · Tab K9 (TB305FU)before 17.0.10.324
Lenovo · Tab K9 (TB305XU)before 17.0.10.318

On the Atlas

Every published CVE is on the CyberSIXT Atlas, grouped by weakness, vendor and month.

Open the Atlas

Exploitation: Unlikely (under 1%). EPSS under 1%, or no score yet.
CISA KEV: Not listed
Public check: No public nuclei template
Weakness: Authentication Bypass Using an Alternate Path or Channel · Authentication
Vendor: Lenovo
Published: October 2026
Band: Unlikely (under 1%), October 2026

CoverageNo articles yet

No CyberSIXT article names CVE-2026-89057 yet, so there is no coverage timeline, action brief or change log for it. Everything on this page comes from the public CVE record, CISA KEV, EPSS and the nuclei template index. Search the archive or see the CVEs in the news.