critical9.9
CVE-2026-19681
An authenticated command injection vulnerability exists in Security Center related to file upload processing.
Impact
An authenticated command injection vulnerability exists in Security Center related to file upload processing. An attacker could exploit this issue by uploading a specially crafted file, potentially resulting in arbitrary command execution on the underlying operating system.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Tenable | Security Center | before 6.9.0 |