Login Request a demo
XO
Product
XClarity Orchestrator
by Lenovo · last CVE Aug 4, 2026
4
CVEs
0
On KEV
8.8
Max CVSS
0
New 30D
Vulnerabilities4In the news0Timeline
Severity mix
Critical 0High 1Medium 3Low 0
Severity
All severities4Critical0High1Medium3Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add XClarity Orchestrator to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-16793
8.8
1%
Aug 4
Remote Command Injection via OS Profile Password in Lenovo XClarity Orchestrator
Affected: before 2.2.0
CVE-2026-16792
6.1
0%
Aug 4
Global TLS Certificate Validation Bypass in Lenovo XClarity Orchestrator
Affected: through 2.2.0
CVE-2021-3417
4.9
1%
Mar 9
An internal product security audit of LXCO, prior to version 1.2.2, discovered that credentials for Lenovo XClarity Administrator (LXCA), if added as a Resource Manager, are…
Affected: before 1.2.2
CVE-2020-8356
4.9
1%
Mar 9
An internal product security audit of LXCO, prior to version 1.2.2, discovered that optional passwords, if specified, for the Syslog and SMTP forwarders are written to an internal…
Affected: before 1.2.2
Showing 4