CVE-2026-19681

Critical · CVSS 9.9

CVSS: 9.9; nvd
EPSS: 2.24%; 81th pct
KEV: No
Class: other; CWE-78

Description

An authenticated command injection vulnerability exists in Security Center related to file upload processing. An attacker could exploit this issue by uploading a specially crafted file, potentially resulting in arbitrary command execution on the underlying operating system.

References

https://www.tenable.com/security/tns-2026-22

Status: profiled · ingested 2026-08-19T18:00:49.000Z