Skip to content
OpenAdvisories
Low · 3.1 CVE-2025-6026 EUVD-2025-34617GHSA-r5mg-hr4q-j2cr

An improper certificate validation vulnerability was reported in the Lenovo Universal Device Client (UDC) that could allow a user capable o…

Published Oct 15, 2025 · Updated Oct 21, 2025 · Assigned by lenovo

Description

An improper certificate validation vulnerability was reported in the Lenovo Universal Device Client (UDC) that could allow a user capable of intercepting network traffic to obtain application metadata, including device information, geolocation, and telemetry data.

Affected products

VendorProductAffectedFixed
Lenovo Universal Device Client < 25.7.0.21 25.7.0.21

References