Improper Access Control in Application Settings by Vendor X
CVE-2026-19639

5.3MEDIUM

Key Information:

Vendor

Tenable, Inc.

Status
Security Center
Vendor
CVE Published:
14 August 2026

What is CVE-2026-19639?

An improper access control vulnerability exists in Vendor X's Product Y, which allows authenticated non-administrative users to potentially view application settings beyond their designated permissions. This flaw could lead to unauthorized disclosure of sensitive information, posing significant risks to the security posture of the application and its user data.

Affected Version(s)

Security Center Linux 0

References

https://www.tenable.com/security/tns-2026-22
vendor-advisory

CVSS V4

Score:
5.3
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
None
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.