Medium severity6.1NVD Advisory· Published Aug 4, 2026· Updated Aug 24, 2026

CVE-2026-16792

Description

An improper certificate validation vulnerability was reported in multiple Lenovo XClarity Orchestrator (LXCO) 2.2.0 microservices that could allow an adjacent network attacker to intercept sensitive communications by performing a machine-in-the-middle attack against HTTPS connections during TLS certificate validation under certain circumstances.

Affected products

Lenovo/Xclarity Orchestratorllm-fuzzy
Range: 2.2.0

Patches

Vulnerability mechanics

References

support.lenovo.com/my/en/solutions/ht509976-lenovo-xclarity-orchestratornvd

News mentions

No linked articles in our index yet.

cvss	0.397
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000