CVE-2026-64878

Command Injection PUBLISHED

Description (CNA)

Unvalidated input in asset filter parameters allows shell metacharacters to escape command argument handling, resulting in remote code execution as a low-privileged OS user via the Analysis REST endpoint.

Affected (CNA)

Vendor / product	Versions
Tenable, Inc. / Security Center	affected 0 before 6.8.0

CWE

CWE-78

References

https://www.tenable.com/security/tns-2026-19

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.