CVE-2026-16754EPSS p0.1%

CVE-2026-16754CVE-2026-16754

Description

A potential improper certificate validation vulnerability was reported in Lenovo Smart Camera C33, distributed exclusively in the Chinese market, that could allow an adjacent user to intercept or manipulate network communications.

Scoring

CVSS 4.8 ()
VectorCVSS:3.1/AV:A/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N
EPSS0.07% probability of exploitation · percentile 0.1% · 2026-10-16T12:02:51Z
Last modified2026-10-16
Sourced from NVD + FIRST.org EPSS. Curated for EU compliance use cases by Adam Lundqvist, Founder at SQUR.