CVE-2026-14371

The Lenovo XClarity Integrator for Windows Admin Center plugin version 5.1.1 and below running on the WAC Gateway is vulnerable to Powershell Command Injection when establishing remote PowerShell commands.

Score

CVSS 4.0 8.8 High

Status

Awaiting Analysis - psirt@lenovo.com

Published

2026-07-16

Last modified

2026-10-24

Weaknesses

CWE-78

Affected products

• Xclarity Integrator For Microsoft Windows Admin Center (Lenovo)

References

• https://pcsupport.lenovo.com/us/en/product_security/home