CVE-2026-65949

Lenovo XClarity Integrator für WAC und OneCLI: Mehrere Schwachstellen

Lenovo XClarity

Improper neutralization of special elements used in an OS command in Lenovo XClarity Integrator for Microsoft Windows Admin Center 5.1.1 and 5.2.0 allows an authenticated remote attacker to execute arbitrary PowerShell commands by submitting a crafted hostname.

11. Nov 2026

Ausgewertete Quellen

• CERT-Bund
  WID-SEC-2026-3253
• NVD
  CVE-2026-65949