CVE-2026-16754

medium

Description

A potential improper certificate validation vulnerability was reported in Lenovo Smart Camera C33, distributed exclusively in the Chinese market, that could allow an adjacent user to intercept or manipulate network communications.

References

https://iknow.lenovo.com.cn/detail/442625

https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-102532

Details

Source: Mitre, NVD

Published: 2026-10-16

Updated: 2026-10-16

Risk Information

CVSS v2

Base Score: 4.6

Vector: CVSS2#AV:A/AC:H/Au:N/C:C/I:N/A:N

Severity: Medium

CVSS v3

Base Score: 4.8

Vector: CVSS:3.1/AV:A/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N

Severity: Medium

CVSS v4

Base Score: 5.9

Vector: CVSS:4.0/AV:A/AC:L/AT:P/PR:N/UI:P/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N

Severity: Medium

EPSS

EPSS: 0.00074