Command Injection Vulnerability in Affected Product by Vendor
CVE-2026-64881

8.7HIGH

Key Information:

Vendor

Tenable, Inc.

Status
Security Center
Vendor
CVE Published:
21 July 2026

What is CVE-2026-64881?

The vulnerability stems from the audit file upload handler failing to properly sanitize filenames, resulting in the potential for shell metacharacters to be introduced during system command execution. This inability to validate input correctly can lead to a command injection scenario, particularly when exploited in conjunction with other vulnerabilities.

Affected Version(s)

Security Center Linux 0

References

https://www.tenable.com/security/tns-2026-19

CVSS V4

Score:
8.7
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.