CVE-2026-64879

Command Injection PUBLISHED

Description (CNA)

A filename supplied during file upload is not properly sanitized before being used in system command execution, allowing an attacker to inject shell metacharacters and achieve command injection via the audit file upload functionality.

Affected (CNA)

Vendor / product	Versions
Tenable, Inc. / Security Center	unaffected 0 before 6.8.0

CWE

CWE-78

References

https://www.tenable.com/security/tns-2026-19

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.