CVE-2026-19681

creationtimestamp| type| source ---|---|--- 2026-08-14 19:00:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mt2tqtsflm25 2026-08-20 03:37:06+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mticxxpnfw2y...

CVE-2026-19681 Command Injection

An authenticated command injection vulnerability exists in Security Center related to file upload processing. An attacker could exploit this issue by uploading a specially crafted file, potentially resulting in arbitrary command execution on the underlying operating system...

Tenable Security Center SCAP Audit File Command Injection

Tenable Security Center prior to 6.9.0 allows an authenticated user to achieve command execution as the web service account tns via the SCAP audit file upload flow. Filesystem::saveTmp builds staged upload filenames from the raw client-supplied context form parameter tempnam prefix, which is not...