Is CVE-2026-16792 being exploited?

No public exploit is currently tracked.

How severe is CVE-2026-16792?

CVE-2026-16792 has a CVSS v3 severity of MEDIUM (6.1).

Back

CVE-2026-16792

Description

An improper certificate validation vulnerability was reported in multiple Lenovo XClarity Orchestrator (LXCO) 2.2.0 microservices that could allow an adjacent network attacker to intercept sensitive communications by performing a machine-in-the-middle attack against HTTPS connections during TLS certificate validation under certain circumstances.