Improper Certificate Validation in Lenovo Filez Application Vulnerability
CVE-2026-2368

7.5HIGH

Key Information:

Vendor

Lenovo
Status
Filez
Vendor
CVE Published:
11 March 2026

What is CVE-2026-2368?

A vulnerability exists in the Lenovo Filez application due to improper validation of certificates. This flaw can be exploited by an attacker positioned to intercept network communications, potentially allowing unauthorized execution of code. The risk underscores the importance of robust certificate validation mechanisms to safeguard data integrity and confidentiality.

Affected Version(s)

FileZ Android 0 < 11.1.0.35

FileZ Windows 0 < 10.12.3.0

References

https://www.filez.com/securityPolicy

CVSS V4

Score:
7.5
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Adjacent Network
Attack Complexity:
Low
Attack Required:
Physical
Privileges Required:
Undefined
User Interaction:
Unknown

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.