{"description":"Trending threats, MITRE ATT\u0026CK coverage, and detection metadata. Fed continuously.","favicon":"https://feed.craftedsignal.io/favicon-32x32.png","feed_url":"https://feed.craftedsignal.io/products/xclarity-essentials-onecli/feed.json","home_page_url":"https://feed.craftedsignal.io/","icon":"https://feed.craftedsignal.io/apple-touch-icon.png","items":[{"_cs_actors":[],"_cs_cpes":["cpe:2.3:a:lenovo:xclarity_essentials_onecli:*:*:*:*:*:*:*:*"],"_cs_cves":[{"cvss":8.5,"id":"CVE-2026-65952"}],"_cs_exploited":false,"_cs_has_poc":false,"_cs_poc_references":[],"_cs_products":["XClarity Essentials OneCLI"],"_cs_severities":["high"],"_cs_tags":[],"_cs_type":"advisory","_cs_vendors":["Lenovo"],"content_html":"\u003cp\u003eLenovo XClarity Essentials OneCLI 5.5.0 for Linux is affected by an improper neutralization of special elements used in an OS command within its remote SSH operation functionality.\u003c/p\u003e\n\u003ch2 id=\"impact\"\u003eImpact\u003c/h2\u003e\n\u003cp\u003eSuccessful exploitation allows an attacker to execute arbitrary OS commands with the privileges of the configured SSH account on a managed server by supplying a specially crafted remote path.\u003c/p\u003e\n\u003ch2 id=\"recommendation\"\u003eRecommendation\u003c/h2\u003e\n\u003cp\u003eReview documentation from Lenovo for updates regarding this issue.\u003c/p\u003e\n","date_modified":"2026-11-12T00:09:09Z","date_published":"2026-11-12T00:09:09Z","id":"https://feed.craftedsignal.io/briefs/2026-11-cve-2026-65952-lenovo/","summary":"CVE-2026-65952 is a command injection vulnerability in the remote SSH operation functionality of Lenovo XClarity Essentials OneCLI 5.5.0 for Linux that allows execution of arbitrary OS commands with the privileges of the configured SSH account on a managed server by supplying a crafted remote path.","title":"Lenovo XClarity Essentials OneCLI: Command injection via remote path (CVE-2026-65952)","url":"https://feed.craftedsignal.io/briefs/2026-11-cve-2026-65952-lenovo/"}],"language":"en","title":"CraftedSignal Threat Feed - XClarity Essentials OneCLI","version":"https://jsonfeed.org/version/1.1"}