CVE-2026-19682

A command injection vulnerability exists in Security Center where a remote, unauthenticated attacker could exploit this issue to execute arbitrary commands on the underlying operating system with the privileges of the service account.

Score

CVSS 3.1 9.9 Critical

Status

Analyzed - vulnreport@tenable.com

Published

2026-08-14

Last modified

2026-08-15

Weaknesses

CWE-78

Affected products

• Security Center (Tenable)
• Security Center (Tenable Inc.)

References

• https://www.tenable.com/security/tns-2026-22