330 matches found
PT-2026-104478
Name of the Vulnerable Software and Affected Versions Dell OpenManage Integration with Microsoft Windows Admin Center versions prior to 3.7.0 Description An OS Command Injection issue exists due to improper neutralization of special elements used in an OS command. A low privileged attacker with...
PT-2026-104480
Armadin researcher @mhskai2017 has uncovered two authenticated RCE vulnerability affecting Dell OpenManage Integration and Lenovo XClarity Integration with Windows Admin Center CVE-2026-101207 and CVE-2026-65949, both High severity CVSS 8.8. A domain user credential is enough to gain SYSTEM on th...
CVE-2026-16791
A temporary file creation vulnerability in the Linux version of Lenovo XClarity Essentials OneCLI 5.5.0 and below could allow a local low-privileged attacker to overwrite or truncate arbitrary local files with program-generated data when OneCLI is executed with elevated privileges...
CVE-2026-16792
An improper certificate validation vulnerability was reported in multiple Lenovo XClarity Orchestrator LXCO 2.2.0 microservices that could allow an adjacent network attacker to intercept sensitive communications by performing a machine-in-the-middle attack against HTTPS connections during TLS...
CVE-2026-16793
An improper neutralization of special elements used in an operating system command vulnerability was reported in Lenovo XClarity Orchestrator LXCO 2.2.0 that could allow an authenticated attacker to execute arbitrary operating system commands as a privileged user under a specific circumstance...
CVE-2026-16793 Remote Command Injection via OS Profile Password in Lenovo XClarity Orchestrator
An improper neutralization of special elements used in an operating system command vulnerability was reported in Lenovo XClarity Orchestrator LXCO 2.2.0 that could allow an authenticated attacker to execute arbitrary operating system commands as a privileged user under a specific circumstance...
CVE-2026-16793 Remote Command Injection via OS Profile Password in Lenovo XClarity Orchestrator
An improper neutralization of special elements used in an operating system command vulnerability was reported in Lenovo XClarity Orchestrator LXCO 2.2.0 that could allow an authenticated attacker to execute arbitrary operating system commands as a privileged user under a specific circumstance...
EUVD-2026-52886
An improper neutralization of special elements used in an operating system command vulnerability was reported in Lenovo XClarity Orchestrator LXCO 2.2.0 that could allow an authenticated attacker to execute arbitrary operating system commands as a privileged user under a specific circumstance...
CVE-2026-16793
An improper neutralization of special elements used in an operating system command vulnerability was reported in Lenovo XClarity Orchestrator LXCO 2.2.0 that could allow an authenticated attacker to execute arbitrary operating system commands as a privileged user under a specific circumstance...
CVE-2026-16793
The CVE-2026-16793 issue affects Lenovo XClarity Orchestrator (LXCO) 2.2.0, where improper neutralization of special elements in an OS command could allow an authenticated attacker to execute arbitrary OS commands as a privileged user under a specific circumstance. The advisory lists high impact ...
CVE-2026-16792
Lenovo XClarity Orchestrator (LXCO) 2.2.0 microservices contain an improper TLS certificate validation issue that could allow an adjacent attacker to perform a man‑in‑the‑middle attack during HTTPS certificate validation, potentially intercepting sensitive communications. Affected software is Len...
EUVD-2026-52885
An improper certificate validation vulnerability was reported in multiple Lenovo XClarity Orchestrator LXCO 2.2.0 microservices that could allow an adjacent network attacker to intercept sensitive communications by performing a machine-in-the-middle attack against HTTPS connections during TLS...
CVE-2026-16792 Global TLS Certificate Validation Bypass in Lenovo XClarity Orchestrator
An improper certificate validation vulnerability was reported in multiple Lenovo XClarity Orchestrator LXCO 2.2.0 microservices that could allow an adjacent network attacker to intercept sensitive communications by performing a machine-in-the-middle attack against HTTPS connections during TLS...
CVE-2026-16792 Global TLS Certificate Validation Bypass in Lenovo XClarity Orchestrator
An improper certificate validation vulnerability was reported in multiple Lenovo XClarity Orchestrator LXCO 2.2.0 microservices that could allow an adjacent network attacker to intercept sensitive communications by performing a machine-in-the-middle attack against HTTPS connections during TLS...
CVE-2026-16791 Predictable Temporary File Symlink Vulnerability in Lenovo XClarity Essentials OneCLI
A temporary file creation vulnerability in the Linux version of Lenovo XClarity Essentials OneCLI 5.5.0 and below could allow a local low-privileged attacker to overwrite or truncate arbitrary local files with program-generated data when OneCLI is executed with elevated privileges...
CVE-2026-16791
A temporary file creation vulnerability in the Linux version of Lenovo XClarity Essentials OneCLI 5.5.0 and below could allow a local low-privileged attacker to overwrite or truncate arbitrary local files with program-generated data when OneCLI is executed with elevated privileges...
CVE-2026-16791
CVE-2026-16791 affects Lenovo XClarity Essentials OneCLI for Linux, specifically version 5.5.0 and earlier. The issue is a temporary file creation vulnerability that could allow a local, low-privileged attacker to overwrite or truncate arbitrary local files with program-generated data when OneCLI...
EUVD-2026-52884
A temporary file creation vulnerability in the Linux version of Lenovo XClarity Essentials OneCLI 5.5.0 and below could allow a local low-privileged attacker to overwrite or truncate arbitrary local files with program-generated data when OneCLI is executed with elevated privileges...
