CVE-2026-16754

mediumpriority · track · 19EPSS 0.001 · 0 %ile

grimoire priorityP3 · Track

Exploitable?

—

no known exploitation

Likely / severe?

0.07% (0th) EPSS

CVSS 4.8 · medium

Is it mine?

0 products

Check your exposure

Who says so?

— sources

EPSS · scored 2026-10-27

A potential improper certificate validation vulnerability was reported in Lenovo Smart Camera C33, distributed exclusively in the Chinese market, that could allow an adjacent user to intercept or manipulate network communications.

cvss

Technical severity, 0–10. One row per scoring source.

5.9

010

base score 0–10 · higher = more severe · hover a vector to decode⚠ sources disagree · low–medium · 2.1–5.9

v3.14.8mediumCVSS:3.1/AV:A/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:Nprimary · psirt@lenovo.comexploitability 1.2 · impact 3.6

v4.05.9mediumCVSS:4.0/AV:A/AC:L/AT:P/PR:N/UI:P/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:Xsecondary · psirt@lenovo.com

v4.02.1lowCVSS:4.0/AV:A/AC:L/AT:P/PR:N/UI:P/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:U/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:Xsecondary · CVSS-BT (t0sche)