https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Wed, 07 Oct 2026 21:26:50 +0000 https://cve.radiocsirt.org/vuln/bdu:2026-00015 bdu:2026-00015 https://cve.radiocsirt.org/vuln/bdu:2026-00015 https://cve.radiocsirt.org/vuln/euvd-2026-252532 EUVD-2026-252532 https://cve.radiocsirt.org/vuln/euvd-2026-252532 https://cve.radiocsirt.org/vuln/fkie_cve-2025-8557 <p>An internal product security audit of Lenovo XClarity Orchestrator (LXCO) discovered the below vulnerability:</p> <p>An attacker with access to a device on the local Lenovo XClarity Orchestrator (LXCO) network segment may be able to manipulate the local device to create an alternate communication channel which could allow the attacker, under certain conditions, to directly interact with backend LXCO API services typically inaccessible to users. While access controls may limit the scope of interaction, this could result in unauthorized access to internal functionality or data. This issue is not exploitable from remote networks.</p> <p>An internal product security audit of Lenovo XClarity Orchestrator (LXCO) discovered the below vulnerability:</p> <p>An attacker with access to a device on the local Lenovo XClarity Orchestrator (LXCO) network segment may be able to manipulate the local device to create an alternate communication channel which could allow the attacker, under certain conditions, to directly interact with backend LXCO API services typically inaccessible to users. While access controls may limit the scope of interaction, this could result in unauthorized access to internal functionality or data. This issue is not exploitable from remote networks.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2025-8557 https://cve.radiocsirt.org/vuln/ghsa-rg5h-x2jj-82px <p>An internal product security audit of Lenovo XClarity Orchestrator (LXCO) discovered the below vulnerability:</p> <p>An attacker with access to a device on the local Lenovo XClarity Orchestrator (LXCO) network segment may be able to manipulate the local device to create an alternate communication channel which could allow the attacker, under certain conditions, to directly interact with backend LXCO API services typically inaccessible to users. While access controls may limit the scope of interaction, this could result in unauthorized access to internal functionality or data. This issue is not exploitable from remote networks.</p> <p>An internal product security audit of Lenovo XClarity Orchestrator (LXCO) discovered the below vulnerability:</p> <p>An attacker with access to a device on the local Lenovo XClarity Orchestrator (LXCO) network segment may be able to manipulate the local device to create an alternate communication channel which could allow the attacker, under certain conditions, to directly interact with backend LXCO API services typically inaccessible to users. While access controls may limit the scope of interaction, this could result in unauthorized access to internal functionality or data. This issue is not exploitable from remote networks.</p> https://cve.radiocsirt.org/vuln/ghsa-rg5h-x2jj-82px https://cve.radiocsirt.org/vuln/wid-sec-w-2025-2013 <p>Ein lokaler Angreifer kann eine Schwachstelle in Lenovo XClarity Orchestrator ausnutzen, um Sicherheitsvorkehrungen zu umgehen und so Zugriff auf interne Funktionen oder Daten zu erhalten.</p> <p>Ein lokaler Angreifer kann eine Schwachstelle in Lenovo XClarity Orchestrator ausnutzen, um Sicherheitsvorkehrungen zu umgehen und so Zugriff auf interne Funktionen oder Daten zu erhalten.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2025-2013