CVE-2026-19628: high-severity vulnerability in Tenable, Inc. Security Center
Remote Code Execution
Published · Updated
21Vexday Risk Score
No sign of exploitation. No public exploitation artifact known so far.
ssvc Trackcvss 8.6epss 2.1%
exploitation probability
2.1%top 19% of all CVEs
observed exploitation
nono source reports it
A command injection vulnerability exists in Tenable Security Center. An authenticated administrator could modify application configuration values to achieve arbitrary command execution on the underlying operating system when specific backend operations are triggered.
CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
Affected products
Tenable, Inc. · Security CenterRelated CVEs — Tenable, Inc. Security Center
In the same product, most dangerous first.