CVE-2026-19626

Critical · CVSS 9.9

CVSS: 9.9; nvd
EPSS: 0.79%; 53th pct
KEV: No
Class: other; CWE-95

Description

A remote code execution vulnerability exists in Tenable Security Center's report generation functionality. An authenticated, non-administrative user could exploit this issue by supplying specially crafted input that is later processed unsafely during server-side report rendering, resulting in arbitrary code execution with the privileges of the service account.

References

https://www.tenable.com/security/tns-2026-22

Status: profiled · ingested 2026-08-19T18:00:49.000Z