CVE-2026-0520CWE-532

CVE-2026-0520

Low · published March 12, 2026

CVSS v3.1
2.8
EPSS
0%
Percentile
0.7
In the wild
Unconfirmed
What it is

A potential vulnerability was reported in the Lenovo FileZ Android application that, under certain conditions, could allow a local authenticated user to retrieve some sensitive data stored in a log file.

The record
Technical detail
CVSS v3.1
2.8 · LOW
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:L/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00096 · 0.7th percentile
Weakness
CWE-532 · Insertion of Sensitive Information into Log File
Published
2026-03-12T01:16Z
Affected products (1)
ProductVersionsFixed in
lenovo/filez< 11.1.0.3711.1.0.37
References (1)
https://www.filez.com/securityPolicy · [email protected]
EPSS history
Timeline
  • 11 MAR 20:20Z
    A potential vulnerability was reported in the Lenovo FileZ Android application that, under certain conditions, could allow a local authenticated user to…
    cvelistv5