CVE-2026-14371 — Lenovo / XClarity Integrator for Microsoft Windows Admin Center

CVE-2026-14371

Lenovo / XClarity Integrator for Microsoft Windows Admin Center PUBLISHED

Description (CNA)

The Lenovo XClarity Integrator for Windows Admin Center plugin version 5.1.1 and below running on the WAC Gateway is vulnerable to Powershell Command Injection when establishing remote PowerShell commands.

Affected (CNA)

Vendor / product	Versions
Lenovo / XClarity Integrator for Microsoft Windows Admin Center	affected 4.7.1 through 5.1.1

CWE

CWE-78

References

https://pcsupport.lenovo.com/us/en/product_security/home

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.