PT-2026-145472
CVE-2026-65950
·
Published
2026-11-11
·
Updated
2026-11-11
Description by
CVSS 3.1
5.8
MediumMetricsAV:L/AC:L/PR:H/UI:R/S:U/C:N/I:H/A:H
A path traversal vulnerability in the ZIP extraction logic of Lenovo XClarity Essentials OneCLI 5.5.0 for Linux could allow an attacker to write arbitrary files with the privileges of the OneCLI process by convincing a user to process a specially crafted ZIP-based update package.
Found an issue in the description? Have something to add? Feel free to write us 👾