CVE-2026-1068
MediumCVSS 5.3Exploitation Probability (EPSS)
Low risk0th percentile - higher than 0% of all known CVEs
Summary
An improper certificate validation vulnerability was reported in the Lenovo Filez application that could allow a user capable of intercepting network traffic to obtain sensitive user data from the application.
Risk Assessment
A man-in-the-middle attack could lead to the disclosure of sensitive user data, posing a serious threat to privacy and security.
Recommendation
Update the Lenovo Filez application to a patched version. Ensure users operate on trusted networks and have certificate verification enabled.
Other vulnerabilities in Lenovo Filez
Original NVD description (English source)
An improper certificate validation vulnerability was reported in the Lenovo Filez application that could allow a user capable of intercepting network traffic to obtain sensitive user data from the application.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS