CVE-2026-16755
Received
Received - Intake
Information Disclosure in Lenovo Smart Camera C33
Vulnerability report for CVE-2026-16755, including description, CVSS score, EPSS score, affected products, exploitability, helpful resources, and attack-flow context.
Publication date: 2026-10-16
Last updated on: 2026-10-16
Assigner: Lenovo Group Ltd.
Description
Description
A potential vulnerability was reported in Lenovo Smart Camera C33, distributed exclusively in the Chinese market,Β that could allow an unauthorized remote user to disclose sensitive information.
CVSS Scores
EPSS Scores
| Probability: | |
| Percentile: |
Meta Information
Affected Vendors & Products
| Vendor | Product | Version / Range |
|---|---|---|
| Lenovo | Smart | Camera C33 0 |
| Lenovo | Smart | Camera C33 Pro 0 |
| Lenovo | Smart | Camera C35 0 |
| Lenovo | Smart | Camera RQ3 0 |
| Lenovo | Smart | Camera XW1 0 |
| Lenovo | Smart | Network PTZ X5T 0 |
| Lenovo | Smart | Network PTZ X5Q 0 |
| Lenovo | Smart | Network PTZ X5E 0 |
| Lenovo | Smart | Camera X6T 0 |
| Lenovo | Smart | Camera X6Q 0 |
| Lenovo | Smart | Camera C5X 0 |
| Lenovo | Smart | Camera X9T 0 |
Helpful Resources
Exploitability
| CWE ID | Description |
|---|---|
| CWE-1393 | The product uses default passwords for potentially critical functionality. |