HIGHCVE-2026-2368Published Modified CNA lenovo
CVE-2026-2368: An improper certificate validation vulnerability was reported in the Lenovo Filez application that could allow a user capable of intercepting network traffic to execute arbitrary code
An improper certificate validation vulnerability was reported in the Lenovo Filez application that could allow a user capable of intercepting network traffic to execute arbitrary code.
Metrics
- CVSS v4.0
- 7.5
- Severity
- HIGH
- Fixed in
- 10.12.3.0
- Affected Products
- 2
Fix available
10.12.3.011.1.0.35
Affected packages
- Lenovo / FileZ< 10.12.3.0 (from 0)
- Lenovo / FileZ< 11.1.0.35 (from 0)
CVSS Vector
CVSS:4.0/AV:A/AC:L/AT:P/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:NReferences