CVE-2026-16754Medium· 4.8▾ SunlitA potential improper certificate validation vulnerability was reported in Lenovo Smart Camera C33, distributed exclusively in the Chinese market, that could allow an adjacent user to intercept or manipulate network communications.
▾ Sunlit zone — Low / medium · no exploitation signal
impact 26.4 · likelihood 0 · exploitation 0
Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.
A potential improper certificate validation vulnerability was reported in Lenovo Smart Camera C33, distributed exclusively in the Chinese market, that could allow an adjacent user to intercept or manipulate network communications.
smart_camera_c33 < 05.02.31.140smart_camera_c33_pro < 05.02.31.140smart_camera_c35 < 05.02.31.140smart_camera_rq3 < 05.02.31.140smart_camera_xw1 < 05.02.31.140smart_network_ptz_x5t < 05.02.31.140smart_network_ptz_x5q < 05.02.31.140smart_network_ptz_x5e < 05.02.31.140smart_camera_x6t < 05.02.31.140smart_camera_x6q < 05.02.31.140smart_camera_c5x < 05.02.31.140smart_camera_x9t < 05.02.31.140Update product to latest version as indicated in the advisory - https://iknow.lenovo.com.cn/detail/442625
Connected by shared product, vendor, weakness, or advisory.
CVE-2026-16755Medium· 5.3A potential vulnerability was reported in Lenovo Smart Camera C33, distributed exclusively in the Chinese market, that could allow an unauthorized remote user to disclose sensitive information.
CVE-2026-2368High· 7.1An improper certificate validation vulnerability was reported in the Lenovo Filez application that could allow a user capable of intercepting network traffic to execute arbitrary code.
CVE-2026-1068Medium· 5.3An improper certificate validation vulnerability was reported in the Lenovo Filez application that could allow a user capable of intercepting network traffic to obtain sensitive user data from the application.
CVE-2026-89057Medium· 6.8A potential authentication bypass vulnerability was reported in some Lenovo tablets that could allow a user with physical access to gain unauthorized device access.
CVE-2026-92629High· 7.3A potential improper authorization vulnerability was reported in Lenovo Baiying PC Client, distributed exclusively in the Chinese market, that could allow a local authenticated user to execute arbitrary code with elevated privileges.
CVE-2026-89062Medium· 5.5A potential out-of-bounds write vulnerability was reported in the Lenovo Energy Management driver that could allow a local authenticated user to cause a blue screen error.