CVE-2026-14371

The Lenovo XClarity Integrator for Windows Admin Center plugin version 5.1.1 and below running on the WAC Gateway is vulnerable to Powershell Command Injection when establishing remote PowerShell commands...

CVE-2026-14371

The Lenovo XClarity Integrator for Windows Admin Center plugin version 5.1.1 and below running on the WAC Gateway is vulnerable to Powershell Command Injection when establishing remote PowerShell commands...

CVE-2026-14371

The Lenovo XClarity Integrator for Windows Admin Center plugin version 5.1.1 and below running on the WAC Gateway is vulnerable to Powershell Command Injection when establishing remote PowerShell commands...

CVE-2026-14371

The vulnerability CVE-2026-14371 affects Lenovo XClarity Integrator for Windows Admin Center plugin (WAC Gateway) version 5.1.1 and earlier. The issue is a Powershell Command Injection when establishing remote PowerShell commands, with a CVSS v4.0 base score of 8.8 (HIGH) and impact across confid...

EUVD-2026-44978

The Lenovo XClarity Integrator for Windows Admin Center plugin version 5.1.1 and below running on the WAC Gateway is vulnerable to Powershell Command Injection when establishing remote PowerShell commands...

Windows Admin Center Spoofing Vulnerability

Improper neutralization of input during web page generation 'cross-site scripting' in Windows Admin Center allows an unauthorized attacker to perform spoofing over a network...

PT-2026-60516

The Lenovo XClarity Integrator for Windows Admin Center plugin version 5.1.1 and below running on the WAC Gateway is vulnerable to Powershell Command Injection when establishing remote PowerShell commands...

CVE-2026-58643: Improper Neutralization of Input During Web Page Generation

Improper neutralization of input during web page generation 'cross-site scripting' in Windows Admin Center allows an unauthorized attacker to perform spoofing over a network...

CVE-2026-14371: Improper Neutralization of Special Elements used in an OS Command

The Lenovo XClarity Integrator for Windows Admin Center plugin version 5.1.1 and below running on the WAC Gateway is vulnerable to Powershell Command Injection when establishing remote PowerShell commands...

EUVD-2026-43775

Improper authorization in Windows Admin Center allows an authorized attacker to execute code locally...

EUVD-2026-43759

Improper authentication in Windows Admin Center allows an authorized attacker to elevate privileges locally...

EUVD-2026-44044

Improper authentication in Windows Admin Center allows an authorized attacker to elevate privileges over a network...

EUVD-2026-43757

Improper authentication in Windows Admin Center allows an authorized attacker to disclose information over a network...

CVE-2026-56197

Improper neutralization of special elements used in a command 'command injection' in Windows Admin Center allows an authorized attacker to execute code over a network...

CVE-2026-56196

Relative path traversal in Windows Admin Center allows an authorized attacker to execute code over a network...

CVE-2026-58631

Improper authorization in Windows Admin Center allows an authorized attacker to execute code locally...

CVE-2026-56185

Improper authentication in Windows Admin Center allows an authorized attacker to disclose information over a network...

CVE-2026-57107

Improper authentication in Windows Admin Center allows an authorized attacker to elevate privileges locally...

CVE-2026-56169

Improper authentication in Windows Admin Center allows an authorized attacker to elevate privileges over a network...

CVE-2026-56197

The CVE-2026-56197 entry describes a remote code execution in Windows Admin Center caused by improper neutralization of special elements used in a command (command injection). The NVD entry states threat is network-based with an 8.8 CVSS v3.1 base score (High) and that an authenticated attacker w...