Skip to content
CVE PROGRAM SOURCE RECORD9.4 Critical

CVE-2026-19681

Command Injection

Description

An authenticated command injection vulnerability exists in Security Center related to file upload processing. An attacker could exploit this issue by uploading a specially crafted file, potentially resulting in arbitrary command execution on the underlying operating system.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Tenable, Inc. Security Center

Default version status: affected

  • 0 to < 6.9.0affected

References