---
id: "CVE-2026-16755"
kind: "vulnerability"
aliases: ["CVE-2026-16755"]
title: "Lenovo Smart Camera C33: remote user can disclose sensitive information"
severity: "medium"
cvss: 6.0
epss: null
exploited: false
status: "open"
category: "infrastructure"
products: []
ecosystems: []
tags: ["infrastructure", "iot", "lenovo", "smart-camera"]
not_affected_if: ["not-c33-owner"]
published_at: "2026-10-16T00:17:05+00:00"
first_seen_at: "2026-10-23T21:57:12+00:00"
updated_at: "2026-10-25T04:05:54+00:00"
sources: [{"source": "nvd", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-16755", "first_seen_at": "2026-10-23T21:57:12+00:00"}]
---

# Lenovo Smart Camera C33: remote user can disclose sensitive information

A potential flaw in the Lenovo Smart Camera C33, sold only in the Chinese market, lets an unauthorized remote user read sensitive information. The sources do not name the exact weakness or the affected firmware versions.

_Summary, check and fix written by a model from the sources; labelled as such._

## How to check

- unknown

## Fix

- unknown

## Timeline

- 2026-10-23T21:57:12+00:00 nvd https://nvd.nist.gov/vuln/detail/CVE-2026-16755

## From the sources

A potential vulnerability was reported in Lenovo Smart Camera C33, distributed exclusively in the Chinese market, that could allow an unauthorized remote user to disclose sensitive information.

---

_Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai_