---
id: CVE-2026-75941
title: >-
  A potential vulnerability was reported in the Lenovo Legion Zone application,
  distributed exclusively in the Chinese market, that could allow an attacker on
  the same logical network to execute arbitrary code.
summary: >-
  A potential vulnerability was reported in the Lenovo Legion Zone application,
  distributed exclusively in the Chinese market, that could allow an attacker on
  the same logical network to execute arbitrary code.
severity: high
cvss: 8
cvssVector: 'CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H'
cwe:
  - CWE-502
vendor: Lenovo
product: Legion Zone Application
affected:
  - legion_zone_application < 2.0.28.8182
published: '2026-10-16'
updated: '2026-10-16'
sourceUpdated: '2026-10-16T19:55:59.740'
source: NVD
sourceUrl: 'https://nvd.nist.gov/vuln/detail/CVE-2026-75941'
references:
  - url: 'https://iknow.lenovo.com.cn/detail/442627'
    label: psirt@lenovo.com
tags:
  - nvd
  - cve.org
epss: 0.00264
epssPercentile: 0.18227
ssvc:
  exploitation: none
  automatable: 'no'
  technicalImpact: total
  timestamp: '2026-10-16T14:06:57.367407Z'
ingestedAt: '2026-10-15T23:54:16.911Z'
---

## Overview

A potential vulnerability was reported in the Lenovo Legion Zone application, distributed exclusively in the Chinese market, that could allow an attacker on the same logical network to execute arbitrary code.

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.