Read the docs
TI-2026-75107 Aliases CVE-2026-75941

Deserialization flaw in Lenovo Legion Zone lets network attackers run code

Priority LOW 39CWE-502Published · Updated

Key facts

Attack vector
Adjacent network
Privileges required
Low
User interaction
None
Attack complexity
Low
Attack requirements
None
Impact type
Code execution
Confidentiality · integrity · availability
High · High · High
Fix status
Fixed

Attack profile from CVSS 4.0 · CNA. Fix status from CNA. Impact type from CWE-502.

Summary

Lenovo Legion Zone application, distributed exclusively in the Chinese market, is affected before 2.0.28.8182. A potential flaw allows deserialization of untrusted data (CWE-502). An attacker on the same logical network can execute arbitrary code, and the CVSS 4.0 vector rates the impact to confidentiality, integrity and availability as high.

Written with Claude Haiku 5.5 from the sources below · 2026-10-28

Description from the CNA

A potential vulnerability was reported in the Lenovo Legion Zone application, distributed exclusively in the Chinese market, that could allow an attacker on the same logical network to execute arbitrary code.

Why it matters now

Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.00264 18th percentileScored 2026-11-07
Fix Fixed Legion Zone Application (Lenovo): 2.0.28.8182

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation
None
Automatable
No
Technical impact
Total

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

VendorProductAffected versionsFixed inStatusSource
LenovoLegion Zone Applicationbefore 2.0.28.81822.0.28.8182Patch availableCNA
  • Legion Zone Application VendorLenovo Affected before 2.0.28.8182 Fixed in 2.0.28.8182 Patch available CNA

Remediation

Lenovo Legion Zone Application is fixed in version 2.0.28.8182.

Written with Claude Haiku 5.5 from the sources below · 2026-10-28

  • Fix · CNA Legion Zone Application (Lenovo) Fixed in 2.0.28.8182

Timeline

  1. 2026-10-16 Threatist record created from CVE-2026-75941
  2. 2026-10-16 CISA SSVC decision points changed
  3. 2026-10-16 Priority changed: MEDIUM → LOW

References

Other 1

  • TI-2017-03639 Improper handling of exceptional conditions in Apache Struts KEVCVSS 3.1CRITICAL 9.8
  • TI-2024-07516 Insecure Platform Key (PK) used in UEFI system firmware signature CVSS 3.1MEDIUM 6.4
  • TI-2017-13070 OpenSLP releases in the 1.0.2 and 1.1.0 code streams have a heap-related memory… CVSS 3.0CRITICAL 9.8
  • TI-2017-02875 OS command injection in Lenovo Service Framework application CVSS 3.0CRITICAL 9.8
  • TI-2013-01192 Untrusted search path vulnerability in Lenovo Thinkpad Bluetooth with Enhanced Data Rate… CVSS 2.0HIGH 9.3
  • TI-2026-53163 Hard-coded credentials in Lenovo Health Application CVSS 4.0CRITICAL 9.3
See all 534 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences