CVE-2026-65949 is a vulnerability in Lenovo XClarity Integrator for Microsoft Windows Admin Center versions 5.1.1 and 5.2.0. It involves improper neutralization of special elements in an OS command, allowing an authenticated remote attacker to execute arbitrary PowerShell commands by submitting a crafted hostname. The vulnerability has a high severity with a CVSS score of 7.2.