{"id":"CVE-2026-16754","title":"A potential improper certificate validation vulnerability was reported in Lenovo Smart Camera C33, distributed exclusively in the Chinese market, that could allow an adjacent user to intercept or manipulate network communications.","summary":"A potential improper certificate validation vulnerability was reported in Lenovo Smart Camera C33, distributed exclusively in the Chinese market, that could allow an adjacent user to intercept or manipulate network communications.","severity":"medium","cvss":4.8,"cvssVector":"CVSS:3.1/AV:A/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N","cwe":["CWE-295"],"vendor":"Lenovo","product":"Smart Camera C33","affected":["smart_camera_c33 < 05.02.31.140","smart_camera_c33_pro < 05.02.31.140","smart_camera_c35 < 05.02.31.140","smart_camera_rq3 < 05.02.31.140","smart_camera_xw1 < 05.02.31.140","smart_network_ptz_x5t < 05.02.31.140","smart_network_ptz_x5q < 05.02.31.140","smart_network_ptz_x5e < 05.02.31.140","smart_camera_x6t < 05.02.31.140","smart_camera_x6q < 05.02.31.140","smart_camera_c5x < 05.02.31.140","smart_camera_x9t < 05.02.31.140"],"published":"2026-10-16","updated":"2026-10-16","sourceUpdated":"2026-10-16T19:55:59.740","source":"NVD","sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2026-16754","references":[{"url":"https://iknow.lenovo.com.cn/detail/442625","label":"psirt@lenovo.com"}],"tags":["nvd","cve.org"],"epss":0.00074,"epssPercentile":0.00075,"ssvc":{"exploitation":"none","automatable":"no","technicalImpact":"partial","timestamp":"2026-10-16T14:09:28.760829Z"},"ingestedAt":"2026-10-15T23:54:16.913Z","slug":"CVE-2026-16754","body":"## Overview\n\nA potential improper certificate validation vulnerability was reported in Lenovo Smart Camera C33, distributed exclusively in the Chinese market, that could allow an adjacent user to intercept or manipulate network communications.\n\n## Remediation\n\nRefer to the linked advisories for vendor-supplied fixes and affected version ranges.","depth":"sunlit","depthScore":26,"depthScoreParts":{"impact":26.4,"likelihood":0,"exploitation":0,"ransomware":0},"changes":[]}