CVE-2026-16754: Smart Camera C33 0 to before 05.02.31.140; +11 more affected products

Affected technology

Smart Camera C33 · 0 to before 05.02.31.140
Lenovo

Smart Camera C33 Pro · 0 to before 05.02.31.140
Lenovo

Smart Camera C35 · 0 to before 05.02.31.140
Lenovo

Smart Camera RQ3 · 0 to before 05.02.31.140
Lenovo

Smart Camera XW1 · 0 to before 05.02.31.140
Lenovo

Smart Network PTZ X5T · 0 to before 05.02.31.140
Lenovo

Smart Network PTZ X5Q · 0 to before 05.02.31.140
Lenovo

Smart Network PTZ X5E · 0 to before 05.02.31.140
Lenovo

Smart Camera X6T · 0 to before 05.02.31.140
Lenovo

Smart Camera X6Q · 0 to before 05.02.31.140
Lenovo

Smart Camera C5X · 0 to before 05.02.31.140
Lenovo

Smart Camera X9T · 0 to before 05.02.31.140
Lenovo

Component: Not specified by the source

Attack conditions (Vendor/CNA, CVSS 4.0): Adjacent network · No privileges required · Passive user interaction

What an attacker can do

An adjacent user could intercept or manipulate network communications. Vendor/CNA’s CVSS 4.0 assessment (base score 5.9/10) rates confidentiality impact as high; integrity and availability impact as none.