CVE-2026-16754

Severity: medium (CVSS 4.8 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.1% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2026-10-16 · updated 2026-10-16
Weakness: CWE-295

Description

A potential improper certificate validation vulnerability was reported in Lenovo Smart Camera C33, distributed exclusively in the Chinese market, that could allow an adjacent user to intercept or manipulate network communications.

Affected products

Lenovo Smart Camera C33: before 05.02.31.140 — fixed in 05.02.31.140
Lenovo Smart Camera C33 Pro: before 05.02.31.140 — fixed in 05.02.31.140
Lenovo Smart Camera C35: before 05.02.31.140 — fixed in 05.02.31.140
Lenovo Smart Camera C5X: before 05.02.31.140 — fixed in 05.02.31.140
Lenovo Smart Camera RQ3: before 05.02.31.140 — fixed in 05.02.31.140
Lenovo Smart Camera X6Q: before 05.02.31.140 — fixed in 05.02.31.140
Lenovo Smart Camera X6T: before 05.02.31.140 — fixed in 05.02.31.140
Lenovo Smart Camera X9T: before 05.02.31.140 — fixed in 05.02.31.140
Lenovo Smart Camera XW1: before 05.02.31.140 — fixed in 05.02.31.140
Lenovo Smart Network PTZ X5E: before 05.02.31.140 — fixed in 05.02.31.140
Lenovo Smart Network PTZ X5Q: before 05.02.31.140 — fixed in 05.02.31.140
Lenovo Smart Network PTZ X5T: before 05.02.31.140 — fixed in 05.02.31.140

How to fix

Upgrade to a fixed version: Lenovo Smart Camera C33 05.02.31.140; Lenovo Smart Camera C33 Pro 05.02.31.140; Lenovo Smart Camera C35 05.02.31.140; Lenovo Smart Camera C5X 05.02.31.140; Lenovo Smart Camera RQ3 05.02.31.140; Lenovo Smart Camera X6Q 05.02.31.140; Lenovo Smart Camera X6T 05.02.31.140; Lenovo Smart Camera X9T 05.02.31.140; Lenovo Smart Camera XW1 05.02.31.140; Lenovo Smart Network PTZ X5E 05.02.31.140; Lenovo Smart Network PTZ X5Q 05.02.31.140; Lenovo Smart Network PTZ X5T 05.02.31.140. Check the vendor advisory for mitigations.

References

https://iknow.lenovo.com.cn/detail/442625

Get alerted when CVE-2026-16754 or the next vulnerability affects your stack