What is CVE-2026-16793?

CVE-2026-16793 is a high-severity vulnerability in Lenovo Xclarity Orchestrator, classified under Improper Input Validation. CVSS score: 8.8/10. Published 2026-08-04.

How severe is CVE-2026-16793?

High severity. CVSS v3 base score is 8.8 out of 10.

RCE in Lenovo Xclarity Orchestrator

CVE-2026-16793

An improper neutralization of special elements used in an operating system command vulnerability was reported in Lenovo XClarity Orchestrator (LXCO) 2.2.0 that could allow an authenticated attacker to execute arbitrary operating system com…

Vulnerability class: Drupalgeddon 2 (CVE-2018-7600)

CVSS v3 metric

CVSS v3 base score 8.8 (High). Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H.

Affected products

Lenovo Xclarity Orchestrator — versions 0

Weakness classification (CWE)

CWE-20 — Improper Input Validation
CWE-78 — OS Command Injection

References

psirt@lenovo.com (release-notes, product, patch)

Frequently asked questions

What is CVE-2026-16793?: CVE-2026-16793 is a high-severity vulnerability in Lenovo Xclarity Orchestrator, classified under Improper Input Validation. CVSS score: 8.8/10. Published 2026-08-04.
How severe is CVE-2026-16793?: High severity. CVSS v3 base score is 8.8 out of 10.