Improper Certificate Validation in Lenovo Smart Camera C33
CVE-2026-16754

5.9MEDIUM

Key Information:

Vendor

Lenovo
Status
Smart Camera C33
Smart Camera C33 Pro
Smart Camera C35
Smart Camera Rq3
Vendor
CVE Published:
15 October 2026

What is CVE-2026-16754?

An improper certificate validation vulnerability has been identified in the Lenovo Smart Camera C33. This issue allows an adjacent user to potentially intercept or manipulate network communications, raising concerns about the security of data transmitted via this device. The vulnerability is significant as it affects the trusted communication framework, which may leave users susceptible to various network-based attacks in environments where the device is deployed.

Affected Version(s)

Smart Camera C33 0 < 05.02.31.140

Smart Camera C33 Pro 0 < 05.02.31.140

Smart Camera C35 0 < 05.02.31.140

References

https://iknow.lenovo.com.cn/detail/442625
vendor-advisory

CVSS V4

Score:
5.9
Severity:
MEDIUM
Confidentiality:
High
Integrity:
None
Availability:
None
Attack Vector:
Adjacent Network
Attack Complexity:
Low
Attack Required:
Physical
Privileges Required:
Undefined
User Interaction:
Unknown

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Lenovo thanks Tan Qingyin, Jin Chenghua, and Song Yuxin Key, Laboratory of Data and Intelligent System Security, Ministry of Education, China Nankai University
.