CVE-2026-16754
A potential improper certificate validation vulnerability was reported in Lenovo Smart Camera C33, distributed exclusively in the Chinese market, that could allow an adjacent user to intercept or mani
Lenovo Smart Camera C33
CVSS
5.9MediumExploitationNo known exploitationNot in CISA KEV, which does not prove it is unexploitedCISA KEV
Exploit odds (EPSS)0.07%Chance of exploitation activity in the next 30 days, higher than 0% of CVEs. Scored 23 Oct 2026FIRST EPSS
What fixes it
- 05.02.31.140Smart Camera C33CVE List
- 05.02.31.140Smart Camera C33 ProCVE List
- 05.02.31.140Smart Camera C35CVE List
- 05.02.31.140Smart Camera RQ3CVE List
- 05.02.31.140Smart Camera XW1CVE List
- 05.02.31.140Smart Network PTZ X5TCVE List
Show all 12 fixed versions
A fixed version on one release line is not the upgrade target for every line. Check your exact version and any vendor backports.
Description
A potential improper certificate validation vulnerability was reported in Lenovo Smart Camera C33, distributed exclusively in the Chinese market, that could allow an adjacent user to intercept or manipulate network communications.
Text from CVE List
Affected versions 12
- Smart Camera C33affected: all versions before 05.02.31.140CVE List
- Smart Camera C33 Proaffected: all versions before 05.02.31.140CVE List
- Smart Camera C35affected: all versions before 05.02.31.140CVE List
- Smart Camera RQ3affected: all versions before 05.02.31.140CVE List
- Smart Camera XW1affected: all versions before 05.02.31.140CVE List
- Smart Network PTZ X5Taffected: all versions before 05.02.31.140CVE List
- Smart Network PTZ X5Qaffected: all versions before 05.02.31.140CVE List
- Smart Network PTZ X5Eaffected: all versions before 05.02.31.140CVE List
- Smart Camera X6Taffected: all versions before 05.02.31.140CVE List
- Smart Camera X6Qaffected: all versions before 05.02.31.140CVE List
- Smart Camera C5Xaffected: all versions before 05.02.31.140CVE List
- Smart Camera X9Taffected: all versions before 05.02.31.140CVE List