CVE-2026-16792

Name of the Vulnerable Software and Affected Versions Lenovo XClarity Orchestrator (LXCO) version 2.2.0

Description Multiple microservices contain an improper certificate validation flaw. This allows an attacker on the same network to perform a machine-in-the-middle attack against HTTPS connections during TLS certificate validation, potentially leading to the interception of sensitive communications.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.