Is CVE-2026-10589 exploited in the wild?

No. Junglewise Threat Intelligence has no report of CVE-2026-10589 being exploited in the wild.

How severe is CVE-2026-10589?

Medium severity, with a CVSS score of 6, published 16 July 2026.

Which products and versions are affected?

Lenovo IdeaPad Pro 5 16AGP11 BIOS <= T8CN19WW; Lenovo IdeaPad Pro 5 16IPH11 BIOS < S4CN62WW; Lenovo Legion 7 16AGP11 BIOS <= TPCN27WW; Lenovo Legion Pro 5 16ADR10 BIOS <= U5CN07WW; and 7 more.

Is there a fix for CVE-2026-10589?

No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.

How is CVE-2026-10589 attacked?

It is attacked with local access, in device firmware.

Am I affected by CVE-2026-10589?

Check whether you run Lenovo IdeaPad Pro 5 16AGP11 BIOS, Lenovo IdeaPad Pro 5 16IPH11 BIOS, Lenovo Legion 7 16AGP11 BIOS or one of the others listed at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

CVE-2026-10589: Lenovo BIOS out of bounds write in System Management Mode

Q: Is there a fix for CVE-2026-10589?

No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.

Q: How is CVE-2026-10589 attacked?

It is attacked with local access, in device firmware.

Q: Am I affected by CVE-2026-10589?

Check whether you run Lenovo IdeaPad Pro 5 16AGP11 BIOS, Lenovo IdeaPad Pro 5 16IPH11 BIOS, Lenovo Legion 7 16AGP11 BIOS or one of the others listed at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

CVE-2026-10589 · Severity: medium · CVSS 6 · Published 2026-07-16

A security vulnerability has been identified in the BIOS firmware of several Lenovo laptop models, including Yoga, Legion, and IdeaPad series. The BIOS is the fundamental software that starts the computer and manages hardware communication. If exploited, a local attacker with high-level administrative privileges could gain control over the most protected area of the system's memory, potentially allowing them to bypass security protections or cause permanent system instability.

Technologies: Lenovo IdeaPad Pro 5 16AGP11 BIOS, Lenovo IdeaPad Pro 5 16IPH11 BIOS, Lenovo Legion 7 16AGP11 BIOS, Lenovo Legion Pro 5 16ADR10 BIOS, Lenovo Legion Pro 5 16AFR10 BIOS, Lenovo Legion Pro 7 16ADR10H BIOS, Lenovo Legion Pro 7 16AFR10H BIOS, Lenovo LOQ 15ARP10E BIOS, Lenovo V15 G6 ARP BIOS, Lenovo Yoga Book 9 14IAH10 BIOS, Lenovo Yoga Pro 7 15IPH11 BIOS. Vendors: Lenovo.

Quick answers

Is CVE-2026-10589 exploited in the wild?: No. Junglewise Threat Intelligence has no report of CVE-2026-10589 being exploited in the wild.
How severe is CVE-2026-10589?: Medium severity, with a CVSS score of 6, published 16 July 2026.
Which products and versions are affected?: Lenovo IdeaPad Pro 5 16AGP11 BIOS <= T8CN19WW; Lenovo IdeaPad Pro 5 16IPH11 BIOS < S4CN62WW; Lenovo Legion 7 16AGP11 BIOS <= TPCN27WW; Lenovo Legion Pro 5 16ADR10 BIOS <= U5CN07WW; and 7 more.
Is there a fix for CVE-2026-10589?: No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.
How is CVE-2026-10589 attacked?: It is attacked with local access, in device firmware.
Am I affected by CVE-2026-10589?: Check whether you run Lenovo IdeaPad Pro 5 16AGP11 BIOS, Lenovo IdeaPad Pro 5 16IPH11 BIOS, Lenovo Legion 7 16AGP11 BIOS or one of the others listed at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

Technical details

This vulnerability is classified as an out-of-bounds (OOB) write within the BIOS firmware of multiple Lenovo product lines. The flaw resides in the handling of memory operations, which could be leveraged by a local attacker with high privileges (e.g., administrative or SYSTEM) to write data outside of intended buffers. Successful exploitation allows for arbitrary code execution within System Management Mode (SMM), a highly privileged execution environment in x86 CPUs that operates independently of the operating system. This could lead to the bypass of firmware-level security features like Secure Boot or the installation of persistent firmware implants. Lenovo has released BIOS updates for affected models to mitigate this issue.

Affected products

Lenovo Yoga Pro 7 15IPH11 BIOS < TNCN37WW
Lenovo IdeaPad Pro 5 16IPH11 BIOS < S4CN62WW
Lenovo Legion 7 16AGP11 BIOS <= TPCN27WW
Lenovo IdeaPad Pro 5 16AGP11 BIOS <= T8CN19WW
Lenovo Legion Pro 5 16ADR10 BIOS <= U5CN07WW
Lenovo Lenovo V15 G6 ARP BIOS <= TYCN15WW
Lenovo LOQ 15ARP10E BIOS < SUCN18WW
Lenovo Yoga Book 9 14IAH10 BIOS <= QEME23WW
Lenovo Legion Pro 7 16AFR10H BIOS < SMCN20WW
Lenovo Legion Pro 5 16AFR10 BIOS <= RECN14WW
Lenovo Legion Pro 7 16ADR10H BIOS < SJCN17WW

Timeline

2026-07-16: advisory: Initial advisory published by Lenovo and NVD

References

https://support.lenovo.com/us/en/product_security/LEN-220440

This page as Markdown. Free to reuse under CC BY 4.0 with a link back.