High · 8.8 CVE-2026-14371 EUVD-2026-44978GHSA-mh4x-4mfg-2vp2

The Lenovo XClarity Integrator for Windows Admin Center plugin version 5.1.1 and below running on the WAC Gateway is vulnerable to Powershe…

Published Jul 16, 2026 · Updated Jul 16, 2026 · Assigned by lenovo

Vendor: Lenovo Product: XClarity Integrator for Microsoft Windows Admin Center Platform: Windows

Description

The Lenovo XClarity Integrator for Windows Admin Center plugin version 5.1.1 and below running on the WAC Gateway is vulnerable to Powershell Command Injection when establishing remote PowerShell commands.

Affected products

Vendor	Product	Affected	Fixed
Lenovo	XClarity Integrator for Microsoft Windows Admin Center	4.7.1 – ≤ 5.1.1	—

References

https://pcsupport.lenovo.com/us/en/product_security/home vendor-advisory