Low 3.2Published Jan 14, 2026

CVE-2025-14058A potential missing authentication vulnerability was reported in some Lenovo Tablets that could allow an unauthorized user with physical access to modify Control Center settings if the device is lock…

Updated under an hour ago (Oct 28, 2026, 1:50 AM ET)

Does this affect you?

It affects Lenovo Tab M11 TB330FU TB330XU and 30 other products. Add what you run to find out whether that includes you.

No exploitation reported and no EPSS estimate yet.

Do this next

Start free and add your stack

Free account, 1 product

Every CVE for Lenovo Tab M11 TB330FU TB330XU

Exploited in the last 30 days

A potential missing authentication vulnerability was reported in some Lenovo Tablets that could allow an unauthorized user with physical access to modify Control Center settings if the device is locked when the "Allow Control Center access when locked" option is disabled.

CVSS: 3.2 LOW (v3.1, CNA)CVSS:3.1/AV:P/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L
Weakness (CWE): CWE-306
Known exploited: Not in CISA's KEV catalog
EPSS (exploitation in the next 30 days): Not loaded for this CVE
Assigned by: lenovo
NVD analysis: Deferred
Record last updated: Jan 15, 2026
First seen by InfoSec Signals: Oct 9, 2026

Affected products

Affected products

Lenovo Tab M11 TB330FU TB330XU lenovo:tab_m11_tb330fu_tb330xu (from the name)	before 17.0.284	CNA record
Lenovo Tab K11 TB330FU lenovo:tab_k11_tb330fu (from the name)	before 17.0.284	CNA record
Lenovo Tab K11 TB330FUP lenovo:tab_k11_tb330fup (from the name)	before 17.0.254	CNA record
Lenovo Tab K11 TB330XU lenovo:tab_k11_tb330xu (from the name)	before 17.0.084	CNA record
Lenovo Tab K11 TB330XUP lenovo:tab_k11_tb330xup (from the name)	before 17.0.254	CNA record
Lenovo Idea Tab Pro TB373FU lenovo:idea_tab_pro_tb373fu (from the name)	before ZUI_17.0.04.266_ST_251120	CNA record
Lenovo Tab K9 TB305FU lenovo:tab_k9_tb305fu (from the name)	before 17.0.10.118	CNA record
Lenovo Tab K9 TB305XU lenovo:tab_k9_tb305xu (from the name)	before 17.0.10.098	CNA record
Lenovo Tab Plus TB351FU lenovo:tab_plus_tb351fu (from the name)	before 17.5.10.023	CNA record
Lenovo Tab M8 4th Gen 2024 TB301FU lenovo:tab_m8_4th_gen_2024_tb301fu (from the name)	before TB301FU_USR_S000126_250919_MP1V1111_ROW	CNA record
1–10 of 31

References

References

https://support.lenovo.com/us/en/product_security/LEN-207951

The CVE record on cve.org NVD's entry

The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.