PT-2026-60516 · Lenovo · Xclarity Integrator For Microsoft Windows Admin Center

CVE-2026-14371 · Published 2026-07-16 · Updated 2026-07-16

NVD

CVSS v4.0

8.8

High

Base vector

AV:N/AC:L/AT:P/PR:L/UI:A/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

The Lenovo XClarity Integrator for Windows Admin Center plugin version 5.1.1 and below running on the WAC Gateway is vulnerable to Powershell Command Injection when establishing remote PowerShell commands.

Fix

OS Command Injection

Weakness Enumeration

CWE-78

Related Identifiers

CVE-2026-14371

Affected Products

Xclarity Integrator For Microsoft Windows Admin Center

References · 2

• https://pcsupport.lenovo.com/us/en/product_security/home · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-14371 · Security Note