Vulnerability Details CVE-2026-64880
Unsanitized user-supplied input in report filtering parameters is concatenated directly into SQL queries without proper escaping or parameterized queries, enabling blind SQL injection and unauthorized database read access.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.003
EPSS Ranking 23.7%
CVSS Severity
CVSS v3 Score 7.1
References
Products affected by CVE-2026-64880
-
cpe:2.3:a:tenable:security_center:6.6.0
-
cpe:2.3:a:tenable:security_center:6.7.0
-
cpe:2.3:a:tenable:security_center:6.7.2
-
cpe:2.3:a:tenable:security_center:6.7.5
-
cpe:2.3:a:tenable:security_center:6.8.0
-
cpe:2.3:o:linux:linux_kernel:-