1. Home
  2. CVE Database
  3. CVE-2026-1068
MEDIUM · 5.3

CVE-2026-1068

An improper certificate validation vulnerability was reported in the Lenovo Filez application that could allow a user capable of intercepting network traffic to obtain sensitive user data from the app...

Vulnerability Description

An improper certificate validation vulnerability was reported in the Lenovo Filez application that could allow a user capable of intercepting network traffic to obtain sensitive user data from the application.

CVSS Score

5.3

MEDIUM

CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N
Attack Vector
ADJACENT_NETWORK
Attack Complexity
HIGH
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality
HIGH
Integrity
NONE
Availability
NONE

Affected Products

VendorProductVersions
LenovoFilez< 10.12.3.0

Related Weaknesses (CWE)

CWE-295

References

FAQ

What is CVE-2026-1068?

CVE-2026-1068 is a vulnerability with a CVSS score of 5.3 (MEDIUM). An improper certificate validation vulnerability was reported in the Lenovo Filez application that could allow a user capable of intercepting network traffic to obtain sensitive user data from the app...

How severe is CVE-2026-1068?

CVE-2026-1068 has been rated MEDIUM with a CVSS base score of 5.3/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2026-1068?

Check the references section above for vendor advisories and patch information. Affected products include: Lenovo Filez.