Advisories · Technology

Lenovo XClarity Orchestrator.

Every CVE that names Lenovo XClarity Orchestrator among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-16793 CVE record

CVSS 8.7 High

Remote Command Injection via OS Profile Password in Lenovo XClarity Orchestrator
- Lenovo XClarity Orchestrator
- Command injection
- CWE-20
Not analysed yet 4 Aug 2026
CVE-2026-16792 CVE record

CVSS 7.0 High

Global TLS Certificate Validation Bypass in Lenovo XClarity Orchestrator
- Lenovo XClarity Orchestrator
- Weak cryptography or TLS
Not analysed yet 4 Aug 2026
CVE-2021-3417 CVE record

CVSS 4.9 Medium

Cleartext transmission of sensitive information in Lenovo XClarity Orchestrator
- Lenovo XClarity Orchestrator
- Weak cryptography or TLS
Not analysed yet 9 Mar 2021
CVE-2020-8356 CVE record

CVSS 4.9 Medium

Cleartext transmission of sensitive information in Lenovo XClarity Orchestrator
- Lenovo XClarity Orchestrator
- Weak cryptography or TLS
Not analysed yet 9 Mar 2021