CVE-2026-19631CWE-89sql-injection

CVE-2026-19631

Medium · published August 14, 2026

CVSS v3.1
4.9
EPSS
0%
Percentile
32.0
In the wild
Unconfirmed
What it is

A SQL injection vulnerability exists in Security Center that could allow an authenticated administrator to execute arbitrary SQL queries, potentially resulting in unauthorized access to sensitive data, including credentials.

The record
Technical detail
CVSS v3.1
4.9 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N
CVSS v4.0
6.9 · CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N
EPSS
0.00391 · 32.0th percentile
Weakness
CWE-89 · Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
Published
2026-08-14T22:17Z
Affected products (1)
ProductVersionsFixed in
tenable/security_center< 6.9.06.9.0
References (1)
https://www.tenable.com/security/tns-2026-22 · [email protected]
EPSS history
Timeline
  • 14 AUG 17:08Z
    SQL Injection
    cvelistv5