CVE-2026-19681

Command Injection PUBLISHED

Description (CNA)

An authenticated command injection vulnerability exists in Security Center related to file upload processing. An attacker could exploit this issue by uploading a specially crafted file, potentially resulting in arbitrary command execution on the underlying operating system.

Affected (CNA)

Vendor / product	Versions
Tenable, Inc. / Security Center	affected 0 before 6.9.0

CWE

CWE-78

References

https://www.tenable.com/security/tns-2026-22

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.