Input Validation Issue in Security Center File Upload Handling by Vendor
CVE-2026-19679

8.7HIGH

Key Information:

Vendor

Tenable, Inc.

Status
Security Center
Vendor
CVE Published:
14 August 2026

What is CVE-2026-19679?

An input validation vulnerability has been identified in Security Center's handling of file uploads. This issue arises due to insufficient sanitization of uploaded filenames, which could potentially lead to a command injection attack. Attackers may exploit this vulnerability to execute arbitrary commands on the server, highlighting the critical need for enhanced input validation routines in file upload functionalities.

Affected Version(s)

Security Center Linux 0

References

https://www.tenable.com/security/tns-2026-22
vendor-advisory

CVSS V4

Score:
8.7
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.