CVE-2026-1068

An improper certificate validation vulnerability was reported in the Lenovo Filez application that could allow a user capable of intercepting network traffic to obtain sensitive user data from the application.

Score

CVSS 4.0 6.0 Medium

Status

Analyzed - psirt@lenovo.com

Published

2026-03-11

Last modified

2026-03-12

Weaknesses

CWE-295

Affected products

• Filez (Lenovo)

References

• https://www.filez.com/securityPolicy