CVE-2026-19626
CriticalCVSS 9.9Summary
A remote code execution vulnerability exists in Tenable Security Center's report generation functionality. An authenticated, non-administrative user could exploit this issue by supplying specially crafted input that is later processed unsafely during server-side report rendering, resulting in arbitrary code execution with the privileges of the service account.
Risk Assessment
An authenticated user could gain full control of the server, potentially leading to data confidentiality and integrity breaches.
Recommendation
Update Tenable Security Center to a patched version. Restrict user privileges and monitor report generation activity.
Original NVD description (English source)
A remote code execution vulnerability exists in Tenable Security Center's report generation functionality. An authenticated, non-administrative user could exploit this issue by supplying specially crafted input that is later processed unsafely during server-side report rendering, resulting in arbitrary code execution with the privileges of the service account.