Threats Tagged 'cve-2026-0520'

CVE-2026-0520 is a low-severity vulnerability in the Lenovo FileZ Android application where sensitive information may be inserted into log files accessible by a local authenticated user. This issue arises from improper handling of sensitive data, leading to potential exposure through log files. Exploitation requires local access with authentication and some user interaction, limiting the attack scope. The vulnerability does not affect confidentiality broadly, nor does it impact integrity or availability significantly. No known exploits are currently in the wild, and no patches have been released yet. Organizations using Lenovo FileZ on Android devices should be aware of this risk, especially in environments where multiple users share devices or where local access controls are weak. Mitigation involves restricting access to log files, auditing logging practices, and monitoring for unauthorized access. Countries with significant Lenovo Android device usage and enterprise deployments are more likely to be affected. Overall, this vulnerability poses a low risk but should be addressed to prevent inadvertent data leakage.

LowVulnerabilityUnited StatesChinaIndia+7#cve#cve-2026-0520#cwe-532