Vulnerabilities CVE-2026-16793

CVE-2026-16793

High

Open

TLP:CLEAR

Remote Command Injection via OS Profile Password in Lenovo XClarity Orchestrator

NVD CVE.org

AI Analysis

No AI analysis yet.

Description

An improper neutralization of special elements used in an operating system command vulnerability was reported in Lenovo XClarity Orchestrator (LXCO) 2.2.0 that could allow an authenticated attacker to execute arbitrary operating system commands as a privileged user under a specific circumstance.

Details

CVSS Score: 8.8
EPSS Score ⓘ: 0.36%

28.4th percentile
CVSS Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Confidence: 90%
Published: Aug 4, 2026
Last Modified: Aug 5, 2026

Notes

No notes yet. Click "Add Note" to create the first analysis note.

Opinions

No opinions yet. Be the first to assess this intelligence.