Unrated severityNVD Advisory· Published Aug 4, 2026
Remote Command Injection via OS Profile Password in Lenovo XClarity Orchestrator
CVE-2026-16793
Description
An improper neutralization of special elements used in an operating system command vulnerability was reported in Lenovo XClarity Orchestrator (LXCO) 2.2.0 that could allow an authenticated attacker to execute arbitrary operating system commands as a privileged user under a specific circumstance.
Affected products
1- Range: <2.2.0
Patches
Vulnerability mechanics
References
1- support.lenovo.com/my/en/solutions/ht509976-lenovo-xclarity-orchestratormitreproductpatchrelease-notes
News mentions
0No linked articles in our index yet.