{"description":"Trending threats, MITRE ATT\u0026CK coverage, and detection metadata. Fed continuously.","favicon":"https://feed.craftedsignal.io/favicon-32x32.png","feed_url":"https://feed.craftedsignal.io/cpes/cpe2.3alenovolegion_zone/feed.json","home_page_url":"https://feed.craftedsignal.io/","icon":"https://feed.craftedsignal.io/apple-touch-icon.png","items":[{"_cs_actors":[],"_cs_cpes":["cpe:2.3:a:lenovo:legion_zone:*:*:*:*:*:*:*:*"],"_cs_cves":[{"cvss":8,"id":"CVE-2026-75941"}],"_cs_exploited":false,"_cs_has_poc":false,"_cs_poc_references":[],"_cs_products":["Legion Zone"],"_cs_severities":["high"],"_cs_tags":[],"_cs_type":"advisory","_cs_vendors":["Lenovo"],"content_html":"\u003cp\u003eCVE-2026-75941 describes a critical vulnerability within the Lenovo Legion Zone application, a software utility distributed primarily in the Chinese market. The vulnerability allows an unauthenticated attacker present on the same logical network to achieve remote code execution on the target Windows system. Given the application's access requirements and the nature of the flaw, successful exploitation could grant an attacker complete control over the affected host. Defenders operating in regions where this software may be installed should prioritize identifying installations and evaluating the necessity of the application due to the potential for full system compromise.\u003c/p\u003e\n\u003ch2 id=\"impact\"\u003eImpact\u003c/h2\u003e\n\u003cp\u003eSuccessful exploitation of CVE-2026-75941 results in full system compromise for the affected host. While primarily distributed in the Chinese market, any enterprise environment where this software is present faces high risk from lateral movement or local network-based attacks.\u003c/p\u003e\n\u003ch2 id=\"recommendation\"\u003eRecommendation\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003ePerform an inventory search for the 'Lenovo Legion Zone' application across the workstation fleet using endpoint management tools.\u003c/li\u003e\n\u003cli\u003eMonitor local network traffic for anomalous behavior originating from or targeting Windows workstations running Lenovo software.\u003c/li\u003e\n\u003cli\u003eRemove or disable the Lenovo Legion Zone application if it is not strictly required for business operations.\u003c/li\u003e\n\u003c/ul\u003e\n","date_modified":"2026-10-16T00:41:16Z","date_published":"2026-10-16T00:41:16Z","id":"https://feed.craftedsignal.io/briefs/2026-10-lenovo-legion-zone-rce/","summary":"A vulnerability in the Lenovo Legion Zone application allows an attacker on the same logical network to execute arbitrary code on the host system.","title":"Remote Code Execution in Lenovo Legion Zone Application","url":"https://feed.craftedsignal.io/briefs/2026-10-lenovo-legion-zone-rce/"}],"language":"en","title":"CraftedSignal Threat Feed - Cpe:2.3:a:lenovo:legion_zone:*:*:*:*:*:*:*:*","version":"https://jsonfeed.org/version/1.1"}