Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Release: Lenovo FileZ, FileZ 10.12.3.0, 11.1.0.35 Clear all filters
TI-2026-02004 CVE-2026-2368 · GHSA-wcw9-6j3m-22m2

Improper certificate validation in Lenovo FileZ

Priority LOW 34

An improper certificate validation vulnerability was reported in the Lenovo Filez application that could allow a user capable of intercepting network traffic to execute arbitrary code.

CVSS 4.0HIGH 7.5 Adjacent network No auth User interaction EPSS 0.00152 Published 2026-03-11 Fixed in 10.12.3.0, 11.1.0.35 CWE-295
TI-2026-00800 CVE-2026-1068 · GHSA-5mc7-jwxc-9m39

Improper certificate validation in Lenovo FileZ

Priority LOW 25

An improper certificate validation vulnerability was reported in the Lenovo Filez application that could allow a user capable of intercepting network traffic to obtain sensitive user data from the application.

CVSS 4.0MEDIUM 6.0 Adjacent network No auth No interaction EPSS 0.0009 Published 2026-03-11 Fixed in 10.12.3.0, 11.1.0.35 CWE-295