Riskcovery

CVE-2026-16754

State
Published
Severity
5.9 Medium
Published
Oct 15, 2026
Updated
Oct 16, 2026
Reserved
Jul 23, 2026

Read the record on cve.org

Description

A potential improper certificate validation vulnerability was reported in Lenovo Smart Camera C33, distributed exclusively in the Chinese market, that could allow an adjacent user to intercept or manipulate network communications.

Scores

CVSSScoreVectorSource
4.05.9 MediumCVSS:4.0/AV:A/AC:L/AT:P/PR:N/UI:P/VC:H/VI:N/VA:N/SC:N/SI:N/SA:Nlenovo
3.14.8 MediumCVSS:3.1/AV:A/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:Nlenovo

Weaknesses

  • CWE-295 Improper Certificate Validation

Affected Products

ProductVersions
Smart Camera C33Lenovo
  • before 05.02.31.140Affected
Smart Camera C33 ProLenovo
  • before 05.02.31.140Affected
Smart Camera C35Lenovo
  • before 05.02.31.140Affected
Smart Camera RQ3Lenovo
  • before 05.02.31.140Affected
Smart Camera XW1Lenovo
  • before 05.02.31.140Affected
Smart Network PTZ X5TLenovo
  • before 05.02.31.140Affected
Smart Network PTZ X5QLenovo
  • before 05.02.31.140Affected
Smart Network PTZ X5ELenovo
  • before 05.02.31.140Affected
Smart Camera X6TLenovo
  • before 05.02.31.140Affected
Smart Camera X6QLenovo
  • before 05.02.31.140Affected
Smart Camera C5XLenovo
  • before 05.02.31.140Affected
Smart Camera X9TLenovo
  • before 05.02.31.140Affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.