Vulnerability Details CVE-2026-19626
A remote code execution vulnerability exists in Tenable Security Center's report generation functionality. An authenticated, non-administrative user could exploit this issue by supplying specially crafted input that is later processed unsafely during server-side report rendering, resulting in arbitrary code execution with the privileges of the service account.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.008
EPSS Ranking 53.3%
CVSS Severity
CVSS v3 Score 9.9
References