PT-2026-67825 · Lenovo · Xclarity Orchestrator

CVE-2026-16793

·

Published

2026-08-04

·

Updated

2026-08-05

CVSS v3.1

8.8

High

VectorAV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions Lenovo XClarity Orchestrator (LXCO) version 2.2.0
Description An improper neutralization of special elements used in an operating system command allows an authenticated attacker to execute arbitrary operating system commands as a privileged user under specific circumstances.
Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

RCE

OS Command Injection

Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com

Weakness Enumeration

CWE-20CWE-78

Related Identifiers

CVE-2026-16793

Affected Products

Xclarity Orchestrator