---
id: CVE-2026-75941
title: >-
  A potential vulnerability was reported in the Lenovo Legion Zone application,
  distributed exclusively in the Chinese market, that could allow an attacker on
  the same logical network to execute arbitrary code.
summary: >-
  A potential vulnerability was reported in the Lenovo Legion Zone application,
  distributed exclusively in the Chinese market, that could allow an attacker on
  the same logical network to execute arbitrary code.
severity: high
cvss: 8
cvssVector: 'CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H'
cvssSource: cna
cwe:
  - CWE-502
vendor: Lenovo
product: Legion Zone Application
affected:
  - legion_zone_application < 2.0.28.8182
published: '2026-10-15'
updated: '2026-10-15'
sourceUpdated: '2026-10-15T23:17:26.930Z'
source: CVEORG
sourceUrl: 'https://www.cve.org/CVERecord?id=CVE-2026-75941'
references:
  - url: 'https://iknow.lenovo.com.cn/detail/442627'
tags:
  - cve.org
ingestedAt: '2026-10-15T23:54:16.911Z'
---

## Overview

A potential vulnerability was reported in the Lenovo Legion Zone application, distributed exclusively in the Chinese market, that could allow an attacker on the same logical network to execute arbitrary code.

## Affected

- `legion_zone_application < 2.0.28.8182`

## Remediation

Update Legion Zone application to version 2.0.28.8182 or later.