[ CVE-2026-16755 · Published 16 Oct 2026 ]

Vulnerability in Lenovo Smart Camera C33

CVSS 5.3 EPSS <1%No fix listed yet

[ Description ]Official description

A potential vulnerability was reported in Lenovo Smart Camera C33, distributed exclusively in the Chinese market, that could allow an unauthorized remote user to disclose sensitive information.

[ Fixes ]Fixes and patches

No fix or interim patch is linked from our sources yet. Check the vendor references below and limit exposure of affected systems until a fix is available.

[ References ]References

iknow.lenovo.com.cn/detail/442625

[ Facts ]Key facts

CVE: CVE-2026-16755
EUVD: EUVD-2026-102533
Published: 16 Oct 2026, 00:17 UTC
Updated: 16 Oct 2026, 19:55 UTC
NVD status: Awaiting Analysis
CVSS 3.1: 5.3 Medium
CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N
Scored by psirt@lenovo.com
EPSS: 0.16% chance of exploitation in 30 days · higher than 4% of CVEs
CISA SSVC: Exploitation: none · Automatable: no · Impact: partial
Weakness: CWE-1393

[ Affected ]Affected products

Lenovo Smart Camera C33< 05.02.31.140
Lenovo Smart Camera C33 Pro< 05.02.31.140
Lenovo Smart Camera C35< 05.02.31.140
Lenovo Smart Camera RQ3< 05.02.31.140
Lenovo Smart Camera XW1< 05.02.31.140
Lenovo Smart Network PTZ X5T< 05.02.31.140
Lenovo Smart Network PTZ X5Q< 05.02.31.140
Lenovo Smart Network PTZ X5E< 05.02.31.140
Lenovo Smart Camera X6T< 05.02.31.140
Lenovo Smart Camera X6Q< 05.02.31.140
Lenovo Smart Camera C5X< 05.02.31.140
Lenovo Smart Camera X9T< 05.02.31.140