8.8
Élevée
CVE-2026-16793 An improper neutralization of special elements used in an operating system command vulnerability was reported in…
Description
An improper neutralization of special elements used in an operating system command vulnerability was reported in Lenovo XClarity Orchestrator (LXCO) 2.2.0 that could allow an authenticated attacker to execute arbitrary operating system commands as a privileged user under a specific circumstance.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| XClarity Orchestrator 2.2 | premières → < 2.2.0 | 2.2.0 |
Autres CVE de XClarity Orchestrator
Les 4 CVE de XClarity Orchestrator →
CVE-2026-16792
An improper certificate validation vulnerability was reported in multiple Lenovo XClarity Orchestrator (LXCO) 2.2.0…
6.1
Moyenne
CVE-2021-3417
An internal product security audit of LXCO, prior to version 1.2.2, discovered that credentials for Lenovo XClarity…
4.9
Moyenne
CVE-2020-8356
An internal product security audit of LXCO, prior to version 1.2.2, discovered that optional passwords, if specified,…
4.9
Moyenne