Lenovo FileZ

• CVE-2026-2368 High 7.1 An improper certificate validation vulnerability was reported in the Lenovo Filez application that could allow a user capable of intercepting network traffic to execute arbitrary code. 0.2%
• CVE-2026-1068 Medium 5.3 An improper certificate validation vulnerability was reported in the Lenovo Filez application that could allow a user capable of intercepting network traffic to obtain sensitive user data from the app <0.1%
• CVE-2026-0520 Low 2.8 A potential vulnerability was reported in the Lenovo FileZ Android application that, under certain conditions, could allow a local authenticated user to retrieve some sensitive data stored in a log fi 0.1%