CVE-2026-75940

Deferred Deferred - Pending Action

Lenovo Health App Sensitive Data Exposure

Publication date: 2026-09-10

Last updated on: 2026-09-10

Assigner: Lenovo Group Ltd.

Description

A vulnerability was reported in Lenovo Health Android Application, distributed exclusively in the Chinese market, that could allow an attacker to access sensitive health-related information.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-09-10

Last Modified

2026-09-10

Generated

2026-09-11

AI Q&A

2026-09-11

EPSS Evaluated

N/A

NVD

CVE-2026-75940

Affected Vendors & Products

Vendor	Product	Version / Range
lenovo	health_android_application	*

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-798	The product contains hard-coded credentials, such as a password or cryptographic key.

Attack-Flow Graph

Executive Summary

This vulnerability affects the Lenovo Health Android Application, which is only distributed in China. It allows an attacker to access sensitive health-related information due to insufficient security controls in the application.

Detection Guidance

Detection methods are not specified in the provided CVE details. Focus on monitoring Lenovo Health Android app traffic and unusual data access patterns.

Impact Analysis

If you use the Lenovo Health Android Application in China, an attacker could steal your health data, leading to privacy breaches, identity theft, or misuse of sensitive information.

Compliance Impact

This vulnerability could lead to non-compliance with data protection regulations like GDPR or HIPAA, as it exposes sensitive health data without adequate protection, potentially violating privacy and security requirements.

Mitigation Strategies

Immediately uninstall or disable the Lenovo Health Android app if installed. Update the app to the latest version if an update is available. Monitor network traffic for unauthorized data exfiltration.

Hi! I’m here to help you understand CVE-2026-75940. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70