Vulnerability Details CVE-2026-19629
A privilege escalation vulnerability exists in Tenable Security Center that allows a user with "Security Manager" role and "manage user" permission on a single group to modify users belonging to other groups. This bypasses the intended access control restrictions and enables unauthorized cross-group user management.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.004
EPSS Ranking 30.4%
CVSS Severity
CVSS v3 Score 8.1
References
Products affected by CVE-2026-19629
-
cpe:2.3:a:tenable:security_center:-
-
cpe:2.3:a:tenable:security_center:4.6
-
cpe:2.3:a:tenable:security_center:4.7
-
cpe:2.3:a:tenable:security_center:5.19.0
-
cpe:2.3:a:tenable:security_center:5.5.0
-
cpe:2.3:a:tenable:security_center:5.5.1
-
cpe:2.3:a:tenable:security_center:5.5.2
-
cpe:2.3:a:tenable:security_center:5.7.0
-
cpe:2.3:a:tenable:security_center:6.3.0
-
cpe:2.3:a:tenable:security_center:6.4.0
-
cpe:2.3:a:tenable:security_center:6.4.5
-
cpe:2.3:a:tenable:security_center:6.5.1
-
cpe:2.3:a:tenable:security_center:6.6.0
-
cpe:2.3:a:tenable:security_center:6.7.0
-
cpe:2.3:a:tenable:security_center:6.7.2
-
cpe:2.3:a:tenable:security_center:6.7.5
-
cpe:2.3:a:tenable:security_center:6.8.0