CVE-2026-16755
Received Received - Intake

Information Disclosure in Lenovo Smart Camera C33

Vulnerability report for CVE-2026-16755, including description, CVSS score, EPSS score, affected products, exploitability, helpful resources, and attack-flow context.

Publication date: 2026-10-16

Last updated on: 2026-10-16

Assigner: Lenovo Group Ltd.

Description

A potential vulnerability was reported in Lenovo Smart Camera C33, distributed exclusively in the Chinese market,Β that could allow an unauthorized remote user to disclose sensitive information.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-10-16
Last Modified
2026-10-16
Generated
2026-10-16
AI Q&A
2026-10-16
EPSS Evaluated
N/A
NVD
EUVD

Affected Vendors & Products

Showing 12 associated CPEs
Vendor Product Version / Range
Lenovo Smart Camera C33 0
Lenovo Smart Camera C33 Pro 0
Lenovo Smart Camera C35 0
Lenovo Smart Camera RQ3 0
Lenovo Smart Camera XW1 0
Lenovo Smart Network PTZ X5T 0
Lenovo Smart Network PTZ X5Q 0
Lenovo Smart Network PTZ X5E 0
Lenovo Smart Camera X6T 0
Lenovo Smart Camera X6Q 0
Lenovo Smart Camera C5X 0
Lenovo Smart Camera X9T 0

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-1393 The product uses default passwords for potentially critical functionality.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability in Lenovo Smart Camera C33 could allow an unauthorized remote user to access and disclose sensitive information from devices distributed in the Chinese market.

Impact Analysis

If exploited, this vulnerability may lead to unauthorized access to sensitive data captured or stored by the affected Lenovo Smart Camera models, potentially compromising user privacy.

Compliance Impact

The vulnerability allows unauthorized remote disclosure of sensitive information, which could lead to violations of data protection regulations like GDPR or HIPAA if personal or health data is exposed. However, specific compliance impacts depend on the data processed by the affected Lenovo Smart Camera devices.

Mitigation Strategies

Isolate affected Lenovo Smart Camera devices from the network immediately. Disable remote access features if enabled. Update firmware to the latest version provided by Lenovo. Monitor network traffic for unusual activity from these devices.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-16755. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart