CVE-2025-14058CWE-306

A potential missing authentication vulnerability was reported in some Lenovo Tablets that could allow an unauthorized user with physical access to modify…

Low · published January 14, 2026

CVSS v4.0
2.4
EPSS
0%
Percentile
4.5
In the wild
Unconfirmed
What it is

A potential missing authentication vulnerability was reported in some Lenovo Tablets that could allow an unauthorized user with physical access to modify Control Center settings if the device is locked when the "Allow Control Center access when locked" option is disabled.

The record
Technical detail
CVSS v4.0
2.4 · LOW
Vector
CVSS:4.0/AV:P/AC:L/AT:N/PR:N/UI:P/VC:N/VI:L/VA:L/SC:N/SI:N/SA:N
EPSS
0.00158 · 4.5th percentile
Weakness
CWE-306 · Missing Authentication for Critical Function
Published
2026-01-14T22:20Z
EPSS history
Timeline
  • 14 JAN 22:20Z
    A potential missing authentication vulnerability was reported in some Lenovo Tablets that could allow an unauthorized user with physical access to modify…
    cvelistv5