---
id: CVE-2026-16754
title: >-
  A potential improper certificate validation vulnerability was reported in
  Lenovo Smart Camera C33, distributed exclusively in the Chinese market, that
  could allow an adjacent user to intercept or manipulate network
  communications.
summary: >-
  A potential improper certificate validation vulnerability was reported in
  Lenovo Smart Camera C33, distributed exclusively in the Chinese market, that
  could allow an adjacent user to intercept or manipulate network
  communications.
severity: medium
cvss: 4.8
cvssVector: 'CVSS:3.1/AV:A/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N'
cwe:
  - CWE-295
vendor: Lenovo
product: Smart Camera C33
affected:
  - smart_camera_c33 < 05.02.31.140
  - smart_camera_c33_pro < 05.02.31.140
  - smart_camera_c35 < 05.02.31.140
  - smart_camera_rq3 < 05.02.31.140
  - smart_camera_xw1 < 05.02.31.140
  - smart_network_ptz_x5t < 05.02.31.140
  - smart_network_ptz_x5q < 05.02.31.140
  - smart_network_ptz_x5e < 05.02.31.140
  - smart_camera_x6t < 05.02.31.140
  - smart_camera_x6q < 05.02.31.140
  - smart_camera_c5x < 05.02.31.140
  - smart_camera_x9t < 05.02.31.140
published: '2026-10-16'
updated: '2026-10-16'
sourceUpdated: '2026-10-16T19:55:59.740'
source: NVD
sourceUrl: 'https://nvd.nist.gov/vuln/detail/CVE-2026-16754'
references:
  - url: 'https://iknow.lenovo.com.cn/detail/442625'
    label: psirt@lenovo.com
tags:
  - nvd
  - cve.org
epss: 0.00074
epssPercentile: 0.00075
ssvc:
  exploitation: none
  automatable: 'no'
  technicalImpact: partial
  timestamp: '2026-10-16T14:09:28.760829Z'
ingestedAt: '2026-10-15T23:54:16.913Z'
---

## Overview

A potential improper certificate validation vulnerability was reported in Lenovo Smart Camera C33, distributed exclusively in the Chinese market, that could allow an adjacent user to intercept or manipulate network communications.

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.