CVE-2026-92777

5.4MEDIUM

Key Information:

Vendor: Lenovo
Status: Idea Tab Pro (tb373fu); Idea Tab/ Lenovo Tab K11 Gen 2 (tb336fu); Idea Tab/ Lenovo Tab K11 Gen 2 (tb336fu/tb336zu); Idea Tab/ Lenovo Tab K11 Gen 2 (tb336zu)
Vendor: CVE Published:; 15 October 2026

What is CVE-2026-92777?

A potential vulnerability was reported in some Lenovo Tablets that could allow a user with physical access to an unlocked tablet to bypass device protections and execute arbitrary code.

Affected Version(s)

Idea Tab Pro (TB373FU) 0 < 17.5.10.057

Idea Tab/ Lenovo Tab K11 Gen 2 (TB336FU) 0 < 17.5.10.193

Idea Tab/ Lenovo Tab K11 Gen 2 (TB336FU/TB336ZU) 0 < 17.5.10.213

References

https://support.lenovo.com/us/en/product_security/LEN-221035

vendor-advisory

CVSS V4

Score:

5.4

Severity:

MEDIUM

Confidentiality:

High

Integrity:

High

Availability:

High

Attack Vector:

Physical

Attack Complexity:

Low

Attack Required:

Physical

Privileges Required:

Undefined

User Interaction:

None

Download the Critical Vulnerability Management Cheat Sheet

Timeline

Vulnerability published
Oct 15, 2026
Vulnerability Reserved
Sep 16, 2026

Credit

Lenovo thanks Masayoshi Matsubara for reporting this issue.

CVE-2026-92777 Data

JSON