CVE-2026-64880

Blind SQL Injection PUBLISHED

Description (CNA)

Unsanitized user-supplied input in report filtering parameters is concatenated directly into SQL queries without proper escaping or parameterized queries, enabling blind SQL injection and unauthorized database read access.

Affected (CNA)

Vendor / product	Versions
Tenable, Inc. / Security Center	affected 0 before 6.8.0

CWE

CWE-89

References

https://www.tenable.com/security/tns-2026-19

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.