← CVE Intelligence

CVE-2025-6026

Lenovo / Universal Device Client PUBLISHED

Description (CNA)

An improper certificate validation vulnerability was reported in the Lenovo Universal Device Client (UDC) that could allow a user capable of intercepting network traffic to obtain application metadata, including device information, geolocation, and telemetry data.

Affected (CNA)

Vendor / productVersions
Lenovo / Universal Device Clientaffected 0 before 25.7.0.21

CWE

CWE-295

References

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.