Lenovo XClarity Controller 3: Schwachstelle ermöglicht Erlangen von Administratorrechten
NEOSEC enrichment — no mirror of the original source
Ein entfernter, anonymer Angreifer kann eine Schwachstelle in Lenovo XClarity ausnutzen, um Administratorrechte zu erlangen.
Source: BSI CERT-Bund. For licensing reasons NEOSEC Intel does not mirror the full text verbatim. The full text and expert commentary are available at the original source.
Read the issue at BSI CERT-BundFull advisory
Highbsi:WID-SEC-2026-39021 linked CVE
Open advisory with all CVEs
More on Controller
Other advisories
- HighCVE-2026-76221Red Hat Ansible Automation Platform (automation-controller): Mehrere Schwachstellen
- MediumCVE-2026-59388Cloud Foundry Foundation CAPI (Cloud Foundry Controller): vertrauliche Informationen in Protokolldateien
- HighCVE-2026-59387Cloud Foundry CAPI (Cloud Controller API): unzureichende Zugriffskontrolle
- MediumCVE-2026-59386Cloud Foundry Controller (CAPI): unzureichende Rechteverwaltung
- LowCVE-2026-59385Cloud Foundry CAPI (Cloud Foundry Controller): Umgehung der Autorisierung über nutzergesteuerten Schlüssel
- HighCVE-2026-59387Cloud Foundry CAPI (Cloud Controller API): unzureichende Zugriffskontrolle
- LowCVE-2026-59385Cloud Foundry CAPI (Cloud Foundry Controller): Umgehung der Autorisierung über nutzergesteuerten Schlüssel
- MediumCVE-2026-59388Cloud Foundry Foundation CAPI (Cloud Foundry Controller): vertrauliche Informationen in Protokolldateien
Other news entries
- Hackers exploit Cisco SD-WAN flaw to deploy custom KeyDrift malwareNewsBleepingComputer
- Cisco Catalyst SD-WAN Controller Authentication Bypass VulnerabilityNewsCisco PSIRT
- InfraTrust report warns of exploited flaws in critical network infrastructureNewsBleepingComputer
- Kubernetes (kubelet, kube-controller-manager): Mehrere SchwachstellenVulnerabilityBSI CERT-Bund
- NCSC-2026-0454 [1.00] [M/H] Kwetsbaarheden verholpen in HPE Networking AOSNewsNCSC-NL
- Supermarket Refrigeration Attack Widens to Copeland, Dixell ControllersNewsSecurityWeek
- Attackers Heat French Supermarket Fridges Up to 50°C by Hijacking Danfoss ControllersNewsThe Hacker News
- Refrigeration Controller Hack Spoils Food Across European SupermarketsNewsSecurityWeek
Source: https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-3902
ID