CVE-2026-16792 in XClarity Orchestratorinfo

Zusammenfassung

von MITRE • 04.08.2026

An improper certificate validation vulnerability was reported in multiple Lenovo XClarity Orchestrator (LXCO) 2.2.0 microservices that could allow an adjacent network attacker to intercept sensitive communications by performing a machine-in-the-middle attack against HTTPS connections during TLS certificate validation under certain circumstances.

Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.

Zuständig

Lenovo

Reservieren

23.07.2026

Veröffentlichung

04.08.2026

Moderieren

akzeptiert

Eintrag

VDB-385943

CPE

bereit

EPSS

0.00000

KEV

nein

Aktivitäten

very low

Quellen

Do you want to use VulDB in your project?

Use the official API to access entries easily!