Medium

CVE-2026-16754

Type: advisorySource: Official CVE List1 source record

A potential improper certificate validation vulnerability was reported in Lenovo Smart Camera C33, distributed exclusively in the Chinese market, that could allow an adjacent user to intercept or manipulate network communications.

Announced 15 Oct 2026Group revision 1

Original source ↗

CVE-2026-16754

Primary source · Revision 1

Imported from structured advisory data. Source references identify upstream records or fields; verify affected versions and your deployed configuration.

Security context

Source reference: cve:CVE-2026-16754

Smart Camera C33

Source reference: /containers/cna/affected/0/product

Affected versions: Not stated in this record
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

Smart Camera C33 Pro

Source reference: /containers/cna/affected/1/product

Affected versions: Not stated in this record
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

Smart Camera C35

Source reference: /containers/cna/affected/2/product

Affected versions: Not stated in this record
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

Smart Camera RQ3

Source reference: /containers/cna/affected/3/product

Affected versions: Not stated in this record
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

Smart Camera XW1

Source reference: /containers/cna/affected/4/product

Affected versions: Not stated in this record
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

Smart Network PTZ X5T

Source reference: /containers/cna/affected/5/product

Affected versions: Not stated in this record
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

Smart Network PTZ X5Q

Source reference: /containers/cna/affected/6/product

Affected versions: Not stated in this record
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

Smart Network PTZ X5E

Source reference: /containers/cna/affected/7/product

Affected versions: Not stated in this record
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

Smart Camera X6T

Source reference: /containers/cna/affected/8/product

Affected versions: Not stated in this record
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

Smart Camera X6Q

Source reference: /containers/cna/affected/9/product

Affected versions: Not stated in this record
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

Smart Camera C5X

Source reference: /containers/cna/affected/10/product

Affected versions: Not stated in this record
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

Smart Camera X9T

Source reference: /containers/cna/affected/11/product

Affected versions: Not stated in this record
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

Structured affected-version data

Original package identities and version rules from this source.

[
  {
    "vendor": "Lenovo",
    "product": "Smart Camera C33",
    "versions": [
      {
        "status": "affected",
        "version": "0",
        "lessThan": "05.02.31.140",
        "versionType": "custom"
      }
    ],
    "defaultStatus": "unaffected"
  },
  {
    "vendor": "Lenovo",
    "product": "Smart Camera C33 Pro",
    "versions": [
      {
        "status": "affected",
        "version": "0",
        "lessThan": "05.02.31.140",
        "versionType": "custom"
      }
    ],
    "defaultStatus": "unaffected"
  },
  {
    "vendor": "Lenovo",
    "product": "Smart Camera C35",
    "versions": [
      {
        "status": "affected",
        "version": "0",
        "lessThan": "05.02.31.140",
        "versionType": "custom"
      }
    ],
    "defaultStatus": "unaffected"
  },
  {
    "vendor": "Lenovo",
    "product": "Smart Camera RQ3",
    "versions": [
      {
        "status": "affected",
        "version": "0",
        "lessThan": "05.02.31.140",
        "versionType": "custom"
      }
    ],
    "defaultStatus": "unaffected"
  },
  {
    "vendor": "Lenovo",
    "product": "Smart Camera XW1",
    "versions": [
      {
        "status": "affected",
        "version": "0",
        "lessThan": "05.02.31.140",
        "versionType": "custom"
      }
    ],
    "defaultStatus": "unaffected"
  },
  {
    "vendor": "Lenovo",
    "product": "Smart Network PTZ X5T",
    "versions": [
      {
        "status": "affected",
        "version": "0",
        "lessThan": "05.02.31.140",
        "versionType": "custom"
      }
    ],
    "defaultStatus": "unaffected"
  },
  {
    "vendor": "Lenovo",
    "product": "Smart Network PTZ X5Q",
    "versions": [
      {
        "status": "affected",
        "version": "0",
        "lessThan": "05.02.31.140",
        "versionType": "custom"
      }
    ],
    "defaultStatus": "unaffected"
  },
  {
    "vendor": "Lenovo",
    "product": "Smart Network PTZ X5E",
    "versions": [
      {
        "status": "affected",
        "version": "0",
        "lessThan": "05.02.31.140",
        "versionType": "custom"
      }
    ],
    "defaultStatus": "unaffected"
  },
  {
    "vendor": "Lenovo",
    "product": "Smart Camera X6T",
    "versions": [
      {
        "status": "affected",
        "version": "0",
        "lessThan": "05.02.31.140",
        "versionType": "custom"
      }
    ],
    "defaultStatus": "unaffected"
  },
  {
    "vendor": "Lenovo",
    "product": "Smart Camera X6Q",
    "versions": [
      {
        "status": "affected",
        "version": "0",
        "lessThan": "05.02.31.140",
        "versionType": "custom"
      }
    ],
    "defaultStatus": "unaffected"
  },
  {
    "vendor": "Lenovo",
    "product": "Smart Camera C5X",
    "versions": [
      {
        "status": "affected",
        "version": "0",
        "lessThan": "05.02.31.140",
        "versionType": "custom"
      }
    ],
    "defaultStatus": "unaffected"
  },
  {
    "vendor": "Lenovo",
    "product": "Smart Camera X9T",
    "versions": [
      {
        "status": "affected",
        "version": "0",
        "lessThan": "05.02.31.140",
        "versionType": "custom"
      }
    ],
    "defaultStatus": "unaffected"
  }
]

Related CVEs: CVE-2026-16754
Source reference: /cveMetadata/cveId

Publisher severity

medium

Source reference: /containers/cna/metrics

Event: #32445 · Revision 1
Added to Heist Feed: Sun, 25 Oct 2026 08:49:26 GMT
Publisher date: Thu, 15 Oct 2026 23:16:59 GMT

Read the original announcement

Revision history

25 Oct 2026CVE-2026-16754 · Revision 1Source updated