Skip to content
CVE PROGRAM SOURCE RECORD7.5 High

CVE-2026-2368

An improper certificate validation vulnerability was reported in the Lenovo Filez application that could allow a user capable of intercepting network traffic to execute arbitrary c

Description

An improper certificate validation vulnerability was reported in the Lenovo Filez application that could allow a user capable of intercepting network traffic to execute arbitrary code.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Lenovo FileZ

Default version status: unaffected

  • 0 to < 10.12.3.0affected

Lenovo FileZ

Default version status: unaffected

  • 0 to < 11.1.0.35affected

References