CVE-2026-19681

An authenticated command injection vulnerability exists in Security Center related to file upload processing. An attacker could exploit this issue by uploading a specially crafted file, potentially resulting in arbitrary command execution on the underlying operating system.

Score

CVSS 3.1 9.9 Critical

Status

Analyzed - vulnreport@tenable.com

Published

2026-08-14

Last modified

2026-08-15

Weaknesses

CWE-78

Affected products

• Security Center (Tenable)
• Security Center (Tenable Inc.)

References

• https://www.tenable.com/security/tns-2026-22