CVE-2026-16754: Lenovo Smart Camera c33

Medium severity, CVSS 4.8. EPSS: 0.1% chance of exploitation in the next 30 days.

A potential improper certificate validation vulnerability was reported in Lenovo Smart Camera C33, distributed exclusively in the Chinese market, that could allow an adjacent user to intercept or manipulate network communications.

Affected products

• Lenovo Smart Camera c33: before 05.02.31.140 (fixed in 05.02.31.140)
• Lenovo Smart Camera c33 Pro: before 05.02.31.140 (fixed in 05.02.31.140)
• Lenovo Smart Camera c35: before 05.02.31.140 (fixed in 05.02.31.140)
• Lenovo Smart Camera c5x: before 05.02.31.140 (fixed in 05.02.31.140)
• Lenovo Smart Camera RQ3: before 05.02.31.140 (fixed in 05.02.31.140)
• Lenovo Smart Camera x6q: before 05.02.31.140 (fixed in 05.02.31.140)
• Lenovo Smart Camera x6t: before 05.02.31.140 (fixed in 05.02.31.140)
• Lenovo Smart Camera x9t: before 05.02.31.140 (fixed in 05.02.31.140)
• Lenovo Smart Camera XW1: before 05.02.31.140 (fixed in 05.02.31.140)
• Lenovo Smart Network Ptz x5e: before 05.02.31.140 (fixed in 05.02.31.140)
• Lenovo Smart Network Ptz x5q: before 05.02.31.140 (fixed in 05.02.31.140)
• Lenovo Smart Network Ptz x5t: before 05.02.31.140 (fixed in 05.02.31.140)

Published 2026-10-16. Last modified 2026-10-16.