CVE Catalog
CVE-2026-19681
CriticalCVSS 9.9Summary
An authenticated command injection vulnerability in Security Center related to file upload processing allows an attacker to execute arbitrary commands on the underlying operating system by uploading a specially crafted file.
Risk Assessment
An authenticated attacker could execute commands on the system, potentially leading to privilege escalation or full system compromise.
Recommendation
Apply security updates and implement validation and sanitization of uploaded file names and contents.
Original NVD description (English source)
An authenticated command injection vulnerability exists in Security Center related to file upload processing. An attacker could exploit this issue by uploading a specially crafted file, potentially resulting in arbitrary command execution on the underlying operating system.