Skip to content
Sign in
8.8 High

CVE-2026-16793 An improper neutralization of special elements used in an operating system command vulnerability was reported in…

Description

An improper neutralization of special elements used in an operating system command vulnerability was reported in Lenovo XClarity Orchestrator (LXCO) 2.2.0 that could allow an authenticated attacker to execute arbitrary operating system commands as a privileged user under a specific circumstance.

Affected products and versions

Product Affected versions Fixed in
XClarity Orchestrator 2.2 earliest → < 2.2.0 2.2.0

Other CVEs of XClarity Orchestrator

The 4 CVEs of XClarity Orchestrator →
CVE-2026-16792 An improper certificate validation vulnerability was reported in multiple Lenovo XClarity Orchestrator (LXCO) 2.2.0… 6.1 Medium CVE-2021-3417 An internal product security audit of LXCO, prior to version 1.2.2, discovered that credentials for Lenovo XClarity… 4.9 Medium CVE-2020-8356 An internal product security audit of LXCO, prior to version 1.2.2, discovered that optional passwords, if specified,… 4.9 Medium
Track this CVE