{"id":"CVE-2026-16754","title":"A potential improper certificate validation vulnerability was reported in Lenovo Smart Camera C33, distributed exclusively in the Chinese market, that could allow an adjacent user to intercept or manipulate network communications.","summary":"A potential improper certificate validation vulnerability was reported in Lenovo Smart Camera C33, distributed exclusively in the Chinese market, that could allow an adjacent user to intercept or manipulate network communications.","severity":"medium","cvss":4.8,"cvssVector":"CVSS:3.1/AV:A/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N","cvssSource":"cna","cwe":["CWE-295"],"vendor":"Lenovo","product":"Smart Camera C33","affected":["smart_camera_c33 < 05.02.31.140","smart_camera_c33_pro < 05.02.31.140","smart_camera_c35 < 05.02.31.140","smart_camera_rq3 < 05.02.31.140","smart_camera_xw1 < 05.02.31.140","smart_network_ptz_x5t < 05.02.31.140","smart_network_ptz_x5q < 05.02.31.140","smart_network_ptz_x5e < 05.02.31.140","smart_camera_x6t < 05.02.31.140","smart_camera_x6q < 05.02.31.140","smart_camera_c5x < 05.02.31.140","smart_camera_x9t < 05.02.31.140"],"published":"2026-10-15","updated":"2026-10-15","sourceUpdated":"2026-10-15T23:16:59.545Z","source":"CVEORG","sourceUrl":"https://www.cve.org/CVERecord?id=CVE-2026-16754","references":[{"url":"https://iknow.lenovo.com.cn/detail/442625"}],"tags":["cve.org"],"ingestedAt":"2026-10-15T23:54:16.913Z","slug":"CVE-2026-16754","body":"## Overview\n\nA potential improper certificate validation vulnerability was reported in Lenovo Smart Camera C33, distributed exclusively in the Chinese market, that could allow an adjacent user to intercept or manipulate network communications.\n\n## Affected\n\n- `smart_camera_c33 < 05.02.31.140`\n- `smart_camera_c33_pro < 05.02.31.140`\n- `smart_camera_c35 < 05.02.31.140`\n- `smart_camera_rq3 < 05.02.31.140`\n- `smart_camera_xw1 < 05.02.31.140`\n- `smart_network_ptz_x5t < 05.02.31.140`\n- `smart_network_ptz_x5q < 05.02.31.140`\n- `smart_network_ptz_x5e < 05.02.31.140`\n- `smart_camera_x6t < 05.02.31.140`\n- `smart_camera_x6q < 05.02.31.140`\n- `smart_camera_c5x < 05.02.31.140`\n- `smart_camera_x9t < 05.02.31.140`\n\n## Remediation\n\nUpdate product to latest version as indicated in the advisory - https://iknow.lenovo.com.cn/detail/442625","depth":"sunlit","depthScore":26,"depthScoreParts":{"impact":26.4,"likelihood":0,"exploitation":0,"ransomware":0},"changes":[]}