Lenovo XClarity Integrator for Microsoft Windows Admin Center: Remote Code Execution (CVE-2026-65949)
Lenovo XClarity Integrator for Microsoft Windows Admin Center is vulnerable to an OS command injection flaw allowing authenticated remote attackers to execute arbitrary PowerShell commands via a crafted hostname.
CVE search metadata
CVE search record: CVE-2026-65949. Severity: high. CVSS: 7.2. KEV: no. Product: Lenovo XClarity Integrator for Microsoft Windows Admin Center. Brief: Lenovo XClarity Integrator for Microsoft Windows Admin Center: Remote Code Execution (CVE-2026-65949). Brief link: https://feed.craftedsignal.io/briefs/2026-11-lenovo-xclarity-rce-cve-2026-65949/
Triage facts
Revision 1- Applicability
- Lenovo XClarity Integrator for Microsoft Windows Admin Center
- Evidence
- Unknown
- Severity
- High
- Sources
- 1 public source
- Freshness
- Revision 1Nov 12, 00:08 UTC
- Vulnerabilities
- 1 CVE
- Source quality
- A2Roughly even chance
Lenovo XClarity Integrator for Microsoft Windows Admin Center versions 5.1.1 and 5.2.0 are affected by an improper neutralization vulnerability (CVE-2026-65949). An authenticated remote attacker can exploit this flaw by submitting a crafted hostname to execute arbitrary PowerShell commands.
Impact
Successful exploitation allows an authenticated remote attacker to execute arbitrary PowerShell commands.
Recommendation
Audit systems for the presence of Lenovo XClarity Integrator for Microsoft Windows Admin Center versions 5.1.1 and 5.2.0.