CVE-2026-16754CWE-295

CVE-2026-16754

Medium · published October 16, 2026

CVSS v3.1
4.8
EPSS
0%
Percentile
0.1
In the wild
Unconfirmed
What it is

A potential improper certificate validation vulnerability was reported in Lenovo Smart Camera C33, distributed exclusively in the Chinese market, that could allow an adjacent user to intercept or manipulate network communications.

The record
Technical detail
CVSS v3.1
4.8 · MEDIUM
Vector
CVSS:3.1/AV:A/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N
CVSS v4.0
5.9 · CVSS:4.0/AV:A/AC:L/AT:P/PR:N/UI:P/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N
EPSS
0.00074 · 0.1th percentile
Weakness
CWE-295 · Improper Certificate Validation
Published
2026-10-16T04:17Z
References (1)
https://iknow.lenovo.com.cn/detail/442625 · [email protected]
EPSS history
Timeline
  • 17 OCT 03:28Z
    EPSS moved — → 0%
    epss
  • 15 OCT 23:16Z
    A potential improper certificate validation vulnerability was reported in Lenovo Smart Camera C33, distributed exclusively in the Chinese market, that could…
    cvelistv5
  • 15 OCT 23:16Z
    A potential improper certificate validation vulnerability was reported in Lenovo Smart Camera C33, distributed exclusively in the Chinese market, that could…
    cvelistv5