high7.1
CVE-2026-64880
Unsanitized user-supplied input in report filtering parameters is concatenated directly into SQL queries without proper escaping or parameterized queries, enab…
Impact
Unsanitized user-supplied input in report filtering parameters is concatenated directly into SQL queries without proper escaping or parameterized queries, enabling blind SQL injection and unauthorized database read access.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Tenable | Security Center | from 6.6.0 through 6.8.0 |