Findings

CVE-2026-16754

A potential improper certificate validation vulnerability was reported in Lenovo Smart Camera C33, distributed exclusively in the Chinese market, that could allow an a…

Published Oct 15, 2026 · updated Oct 16, 2026 · Lenovo Smart Camera C33

A potential improper certificate validation vulnerability was reported in Lenovo Smart Camera C33, distributed exclusively in the Chinese market, that could allow an adjacent user to intercept or manipulate network communications.

Code

The project this record applies to. Exploit listings stay in References.

No public source repository is identified for this product.

Timeline

Detection, updates, and resolution for this record.

  1. Oct 16, 2026 · NIST NVD

    Detected

    A potential improper certificate validation vulnerability was reported in Lenovo Smart Camera C33, distributed exclusively in the Chinese market, that could allow an adjacent user to intercept or manipulate network communications.

Affected

  • vendor Lenovo Smart Camera C33version unspecified
  • vendor Lenovo Smart Camera C33 Proversion unspecified
  • vendor Lenovo Smart Camera C35version unspecified
  • vendor Lenovo Smart Camera RQ3version unspecified
  • vendor Lenovo Smart Camera XW1version unspecified
  • vendor Lenovo Smart Network PTZ X5Eversion unspecified
  • vendor Lenovo Smart Network PTZ X5Qversion unspecified
  • vendor Lenovo Smart Network PTZ X5Tversion unspecified

Sources

  • CVE.orgVulnerability recordCVE-2026-16754

    A potential improper certificate validation vulnerability was reported in Lenovo Smart Camera C33, distributed exclusively in the Chinese market, that could allow an adjacent user to intercept or manipulate network communications.

    cve.org
  • NIST NVDVulnerability recordCVE-2026-16754

    A potential improper certificate validation vulnerability was reported in Lenovo Smart Camera C33, distributed exclusively in the Chinese market, that could allow an adjacent user to intercept or manipulate network communications.

    nvd.nist.gov

References

CVE-2026-16754 · ZeroDay Findings