2.3
Low
CVE-2025-6026 An improper certificate validation vulnerability was reported in the Lenovo Universal Device Client (UDC) that could…
Description
An improper certificate validation vulnerability was reported in the Lenovo Universal Device Client (UDC) that could allow a user capable of intercepting network traffic to obtain application metadata, including device information, geolocation, and telemetry data.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Universal Device Client 25.7 | earliest → < 25.7.0.21 | 25.7.0.21 |