Lenovo Legion Zone App: RCE via Same-Network Access
CVE-2026-75941 Published on October 15, 2026
A potential vulnerability was reported in the Lenovo Legion Zone application, distributed exclusively in the Chinese market, that could allow an attacker on the same logical network to execute arbitrary code.
Vulnerability Analysis
Attack Vector:
ADJACENT
Attack Complexity:
LOW
Privileges Required:
LOW
User Interaction:
NONE
Weakness Type
What is a Marshaling, Unmarshaling Vulnerability?
The application deserializes untrusted data without sufficiently verifying that the resulting data will be valid.
CVE-2026-75941 has been classified to as a Marshaling, Unmarshaling vulnerability or weakness.
Products Associated with CVE-2026-75941
Want to know whenever a new CVE is published for Lenovo Legion Zone Application? stack.watch will email you.
Affected Versions
Lenovo Legion Zone Application:- Before 2.0.28.8182 is affected.