Vulnerability Details CVE-2026-19626
A remote code execution vulnerability exists in Tenable Security Center's report generation functionality. An authenticated, non-administrative user could exploit this issue by supplying specially crafted input that is later processed unsafely during server-side report rendering, resulting in arbitrary code execution with the privileges of the service account.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.008
EPSS Ranking 53.4%
CVSS Severity
CVSS v3 Score 9.9
References
Products affected by CVE-2026-19626
-
cpe:2.3:a:tenable:security_center:-
-
cpe:2.3:a:tenable:security_center:4.6
-
cpe:2.3:a:tenable:security_center:4.7
-
cpe:2.3:a:tenable:security_center:5.19.0
-
cpe:2.3:a:tenable:security_center:5.5.0
-
cpe:2.3:a:tenable:security_center:5.5.1
-
cpe:2.3:a:tenable:security_center:5.5.2
-
cpe:2.3:a:tenable:security_center:5.7.0
-
cpe:2.3:a:tenable:security_center:6.3.0
-
cpe:2.3:a:tenable:security_center:6.4.0
-
cpe:2.3:a:tenable:security_center:6.4.5
-
cpe:2.3:a:tenable:security_center:6.5.1
-
cpe:2.3:a:tenable:security_center:6.6.0
-
cpe:2.3:a:tenable:security_center:6.7.0
-
cpe:2.3:a:tenable:security_center:6.7.2
-
cpe:2.3:a:tenable:security_center:6.7.5
-
cpe:2.3:a:tenable:security_center:6.8.0