Lenovo XClarity Integrator für WAC und OneCLI: Mehrere Schwachstellen
NEOSEC enrichment — no mirror of the original source
Ein Angreifer kann mehrere Schwachstellen in Lenovo XClarity ausnutzen, um beliebigen Code auszuführen oder erweiterte Berechtigungen zu erlangen.
Source: BSI CERT-Bund. For licensing reasons NEOSEC Intel does not mirror the full text verbatim. The full text and expert commentary are available at the original source.
Read the issue at BSI CERT-BundFull advisory
Highbsi:WID-SEC-2026-32534 linked CVEs
Open advisory with all CVEs
More on OneCLI
Other advisories
- HighCVE-2026-65952Lenovo XClarity Integrator für WAC und OneCLI: Mehrere Schwachstellen
- LowCVE-2026-16791Lenovo XClarity (OneCLI): Schwachstelle ermöglicht Manipulation von Dateien
- LowCVE-2026-16791Lenovo XClarity Essentials OneCLI: Sicherheitslücke
- LowCVE-2026-16791Lenovo XClarity Essentials OneCLI: Sicherheitslücke
- Not ratedosv:CVE-2026-43873WWBN AVideo: Unauthenticated Disclosure of CloneSite `myKey` via Error Echo in `cloneClient.json.php` Enables Cross-Site DB Dump of the Configured Clone Server
- HighCVE-2026-43873WWBN AVideo is an open source video platform. In versions up to and including 29.0, plugin/CloneSite/cloneClient.json.php echoes the local CloneSite shared s…
- HighCVE-2026-43873AVideo: Unauthenticated Disclosure of CloneSite `myKey` via Error Echo in `cloneClient.json.php` Enables Cross-Site DB Dump of the Configured Clone Server
- LowCVE-2025-14270Walterpinem OneClick Chat to Order: fehlende Autorisierung
Source: https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-3253
ID