← CVE Intelligence

CVE-2026-64877

Tenable, Inc. / Security Center PUBLISHED

Description (CNA)

An authenticated non-admin user can exploit a SQL injection flaw in the ticketing REST API to access sensitive data stored in the appliance database.

Affected (CNA)

Vendor / productVersions
Tenable, Inc. / Security Centerunaffected 0 before 6.8.0

CWE

CWE-20

References

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.