CVE-2026-65949: Lenovo XClarity Integrator for WAC: Gateway-Administrator Remote Command Execution
Published Nov 11, 2026
·Updated
Improper neutralization of special elements used in an OS command in Lenovo XClarity Integrator for Microsoft Windows Admin Center 5.1.1 and 5.2.0 allows an authenticated remote attacker to execute arbitrary PowerShell commands by submitting a crafted hostname.
Event History
Nov 11, 2026
CVE Published
via MITRE·09:11 PM
Data Sourced
via MITRE·09:11 PM
DescriptionSeverityWeakness
Data Sourced
via NVD·10:17 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
Who can exploit this issue?
An attacker must be authenticated and able to submit a crafted hostname to the affected Lenovo XClarity Integrator for Microsoft Windows Admin Center. The vulnerable component is present in versions 5.1.1 and 5.2.0.
2
What level of access does successful exploitation provide?
Successful exploitation allows execution of arbitrary PowerShell commands remotely. The listed impact includes high confidentiality, integrity, and availability impact.