CVE Catalog
CVE-2026-19682
CriticalCVSS 9.9Summary
A command injection vulnerability in Security Center allows a remote, unauthenticated attacker to execute arbitrary commands on the underlying operating system with the privileges of the service account.
Risk Assessment
An attacker could gain full control of the system, leading to complete compromise of data confidentiality, integrity, and availability.
Recommendation
Apply available security updates from the vendor and restrict access to the service from trusted networks.
Original NVD description (English source)
A command injection vulnerability exists in Security Center where a remote, unauthenticated attacker could exploit this issue to execute arbitrary commands on the underlying operating system with the privileges of the service account.