Tenable Security Center vulnerabilities

CVE-2026-19682 Critical · 9.9 CWE-78 Aug 14, 2026

Command Injection

A command injection vulnerability exists in Security Center where a remote, unauthenticated attacker could exploit this issue to execute arbitrary commands on the underlying operating system with the privileges of the service account.

CVE-2026-19681 Critical · 9.9 CWE-78 Aug 14, 2026

Command Injection

An authenticated command injection vulnerability exists in Security Center related to file upload processing. An attacker could exploit this issue by uploading a specially crafted file, potentially resulting in arbitrary command execution on the underlying operating system.

CVE-2026-19680 High · 7.1 CWE-89 Aug 14, 2026

SQL Injection

A SQL injection vulnerability exists in Security Center that could allow an attacker to access unauthorized data from the application's database.

CVE-2026-19679 High · 8.8 CWE-78 Aug 14, 2026

Improper Input Validation

An input validation vulnerability exists in Security Center's file upload handling, where insufficient sanitization of uploaded filenames could contribute to a downstream command injection issue.

CVE-2026-19639 Medium · 4.3 CWE-1284 Aug 14, 2026

Improper Access Control

An improper access control vulnerability exists where an authenticated non-administrative application user could potentially view settings outside of their assigned scope.

CVE-2026-19636 Medium · 5.3 CWE-1270 Aug 14, 2026

Insuffucient Protections Lead to Brute Force

An issue was identified in which CSRF tokens were generated using a predictable method, potentially reducing their effectiveness as a security control. This has been addressed by improving the randomness and entropy of token generation.

CVE-2026-19635 High · 8.8 CWE-78 Aug 14, 2026

Local Privilege Escalation

A local privilege escalation vulnerability exists in Security Center. An attacker with write access to a specific configuration file could achieve arbitrary code execution with elevated privileges, without requiring further user or victim interaction.

CVE-2026-19631 Medium · 4.9 CWE-89 Aug 14, 2026

SQL Injection

A SQL injection vulnerability exists in Security Center that could allow an authenticated administrator to execute arbitrary SQL queries, potentially resulting in unauthorized access to sensitive data, including credentials.

CVE-2026-19629 High · 8.1 CWE-863 Aug 14, 2026

Privilege Escalation

A privilege escalation vulnerability exists in Tenable Security Center that allows a user with "Security Manager" role and "manage user" permission on a single group to modify users belonging to other groups. This bypasses the intended access control restrictions and enables unauthorized cross-group user management.

CVE-2026-19628 High · 7.2 CWE-78 Aug 14, 2026

Remote Code Execution

A command injection vulnerability exists in Tenable Security Center. An authenticated administrator could modify application configuration values to achieve arbitrary command execution on the underlying operating system when specific backend operations are triggered.

CVE-2026-19626 Critical · 9.9 CWE-95 Aug 14, 2026

Remote Code Execution

A remote code execution vulnerability exists in Tenable Security Center's report generation functionality. An authenticated, non-administrative user could exploit this issue by supplying specially crafted input that is later processed unsafely during server-side report rendering, resulting in arbitrary code execution with the privileges of the service account.

CVE-2026-64881 High · 8.8 CWE-78 Jul 21, 2026

Command Injection

The audit file upload handler does not sanitize filenames, allowing shell metacharacters to flow into system command execution. This input validation failure enables command injection when chained with a related vulnerability.

CVE-2026-64880 High · 7.1 CWE-89 Jul 21, 2026

Blind SQL Injection

Unsanitized user-supplied input in report filtering parameters is concatenated directly into SQL queries without proper escaping or parameterized queries, enabling blind SQL injection and unauthorized database read access.

CVE-2026-64879 Critical · 9.9 CWE-78 Jul 21, 2026

Command Injection

A filename supplied during file upload is not properly sanitized before being used in system command execution, allowing an attacker to inject shell metacharacters and achieve command injection via the audit file upload functionality.

CVE-2026-64878 Critical · 9.9 CWE-78 Jul 21, 2026

Command Injection

Unvalidated input in asset filter parameters allows shell metacharacters to escape command argument handling, resulting in remote code execution as a low-privileged OS user via the Analysis REST endpoint.

CVE-2026-64877 High · 8.4 CWE-20 Jul 21, 2026

Improper Input Validation in Tenable Security Center

An authenticated non-admin user can exploit a SQL injection flaw in the ticketing REST API to access sensitive data stored in the appliance database.

CVE-2026-2698 Medium · 6.5 CWE-639 Feb 23, 2026

Improper Access Control

An improper access control vulnerability exists where an authenticated user could access areas outside of their authorized scope.

CVE-2026-2697 High · 8.8 CWE-639 Feb 23, 2026

Indirect Object Reference (IDOR) in Security Center

An Indirect Object Reference (IDOR) in Security Center allows an authenticated remote attacker to escalate privileges via the 'owner' parameter.

CVE-2026-2630 High · 8.8 CWE-78 Feb 17, 2026

[R1] Stand-alone Security Patches Available for Tenable Security Center versions 6.5.1, 6.6.0 and 6.7.2: SC-202602.1 + SC-202602.2

A Command Injection vulnerability exists where an authenticated, remote attacker could execute arbitrary code on the underlying server where Tenable Security Center is hosted.

CVE-2025-36636 Medium · 4.3 CWE-284 Oct 8, 2025

Improper Access Control

In Tenable Security Center versions prior to 6.7.0, an improper access control vulnerability exists where an authenticated user could access areas outside of their authorized scope.