Skip to content
OpenAdvisories
Medium · 4.8 CVE-2026-16754 EUVD-2026-102532GHSA-3hh9-228g-qmjp

A potential improper certificate validation vulnerability was reported in Lenovo Smart Camera C33, distributed exclusively in the Chinese m…

Published Oct 15, 2026 · Updated Oct 16, 2026 · Assigned by lenovo

Vendor: Lenovo Product: Smart Camera C33 Product: Smart Camera C33 Pro Product: Smart Camera C35 Product: Smart Camera C5X Product: Smart Camera RQ3 Product: Smart Camera X6Q Product: Smart Camera X6T Product: Smart Camera X9T Product: Smart Camera XW1 Product: Smart Network PTZ X5E Product: Smart Network PTZ X5Q Product: Smart Network PTZ X5T

Description

A potential improper certificate validation vulnerability was reported in Lenovo Smart Camera C33, distributed exclusively in the Chinese market, that could allow an adjacent user to intercept or manipulate network communications.

Affected products

VendorProductAffectedFixed
Lenovo Smart Camera C33 < 05.02.31.140 05.02.31.140
Lenovo Smart Camera C33 Pro < 05.02.31.140 05.02.31.140
Lenovo Smart Camera C35 < 05.02.31.140 05.02.31.140
Lenovo Smart Camera RQ3 < 05.02.31.140 05.02.31.140
Lenovo Smart Camera XW1 < 05.02.31.140 05.02.31.140
Lenovo Smart Network PTZ X5T < 05.02.31.140 05.02.31.140
Lenovo Smart Network PTZ X5Q < 05.02.31.140 05.02.31.140
Lenovo Smart Network PTZ X5E < 05.02.31.140 05.02.31.140
Lenovo Smart Camera X6T < 05.02.31.140 05.02.31.140
Lenovo Smart Camera X6Q < 05.02.31.140 05.02.31.140
Lenovo Smart Camera C5X < 05.02.31.140 05.02.31.140
Lenovo Smart Camera X9T < 05.02.31.140 05.02.31.140

References