HIGH
CVE-2026-16793
CVSS
8.8
Description
An improper neutralization of special elements used in an operating system command vulnerability was reported in Lenovo XClarity Orchestrator (LXCO) 2.2.0 that could allow an authenticated attacker to execute arbitrary operating system commands as a privileged user under a specific circumstance.
Weakness (CWE)
CWE-20
Improper Input Validation
CWE-78
OS Command Injection
EPSS Score
0.36%
Probability of exploitation in next 30 days
29.3th percentile
Base CVE data derived from NVD (public domain). Enrichment by
dbcve.org
(CC-BY-4.0). Fetched via API.