CVEDB API

An authenticated non-admin user can exploit a SQL injection flaw in the ticketing REST API to access sensitive data stored in the appliance database.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.003

EPSS Ranking 24.2%

CVSS Severity

CVSS v3 Score 8.4

References

Products affected by CVE-2026-64877

Tenable » Security Center » Version: 6.6.0

cpe:2.3:a:tenable:security_center:6.6.0
Tenable » Security Center » Version: 6.7.0

cpe:2.3:a:tenable:security_center:6.7.0
Tenable » Security Center » Version: 6.7.2

cpe:2.3:a:tenable:security_center:6.7.2
Tenable » Security Center » Version: 6.7.5

cpe:2.3:a:tenable:security_center:6.7.5
Tenable » Security Center » Version: 6.8.0

cpe:2.3:a:tenable:security_center:6.8.0
Linux » Linux Kernel » Version: N/A

cpe:2.3:o:linux:linux_kernel:-