Lenovo XClarity Controller 3: Schwachstelle ermöglicht Erlangen von Administratorrechten
NEOSEC enrichment — no mirror of the original source
Ein entfernter, anonymer Angreifer kann eine Schwachstelle in Lenovo XClarity ausnutzen, um Administratorrechte zu erlangen.
Source: BSI CERT-Bund. For licensing reasons NEOSEC Intel does not mirror the full text verbatim. The full text and expert commentary are available at the original source.
Read the issue at BSI CERT-BundFull advisory
Highbsi:WID-SEC-2026-39021 linked CVE
Open advisory with all CVEs
More on Controller
Other advisories
- Not ratedosv:CVE-2026-117605nopCommerce before 5.00.0 Missing Authorization via Admin ProductController Add Popup Handlers
- MediumCVE-2026-2270StatefulSet and ControllerRevision write permissions allow cross-namespace pod creation
- MediumCVE-2026-116677Openwisp-controller: fehlende Autorisierung
- MediumCVE-2026-116677Openwisp-controller: fehlende Autorisierung
- Not ratedosv:CVE-2026-116677OpenWISP Controller CA CRL REST API does not scope requests to managed organizations
- Not ratedosv:CVE-2026-113644iofogctl command injection via Controller provisioning response
- Not ratedosv:CVE-2026-115216Eclipse ioFog Operator disables TLS certificate verification when sending Controller and OIDC credentials
- MediumCVE-2026-2270Kubernetes (kubelet, kube-controller-manager): Mehrere Schwachstellen
Other news entries
- InfraTrust report warns of exploited flaws in critical network infrastructureNewsBleepingComputer
- Kubernetes (kubelet, kube-controller-manager): Mehrere SchwachstellenVulnerabilityBSI CERT-Bund
- NCSC-2026-0454 [1.00] [M/H] Kwetsbaarheden verholpen in HPE Networking AOSNewsNCSC-NL
- Supermarket Refrigeration Attack Widens to Copeland, Dixell ControllersNewsSecurityWeek
- Attackers Heat French Supermarket Fridges Up to 50°C by Hijacking Danfoss ControllersNewsThe Hacker News
- Refrigeration Controller Hack Spoils Food Across European SupermarketsNewsSecurityWeek
- Cyberattack shuts down refrigerators at French supermarketsNewsBleepingComputer
- Hackers hijack refrigeration controllers at about 700 French supermarkets (Danfoss, Copeland and Dixell XWEB)Breachpwn.watch
Source: https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-3902
ID