Vulnerability in Lenovo Health Android Application Exposing Sensitive Health Information
CVE-2026-75940

9.3CRITICAL

Key Information:

Vendor

Lenovo
Status
Health Application
Vendor
CVE Published:
10 September 2026

What is CVE-2026-75940?

A vulnerability in the Lenovo Health Android Application, exclusively distributed in the Chinese market, has been reported that may allow attackers to gain unauthorized access to sensitive health-related information. This issue poses a significant risk to users, potentially compromising their privacy and security.

Affected Version(s)

Health Application Android 0 <= 1.5.0

References

https://iknow.lenovo.com.cn/detail/442248
vendor-advisory

CVSS V4

Score:
9.3
Severity:
CRITICAL
Confidentiality:
High
Integrity:
High
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.