Vulnerability Details CVE-2026-64881
The audit file upload handler does not sanitize filenames, allowing shell metacharacters to flow into system command execution. This input validation failure enables command injection when chained with a related vulnerability.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.022
EPSS Ranking 81.4%
CVSS Severity
CVSS v3 Score 8.8
References
Products affected by CVE-2026-64881
-
cpe:2.3:a:tenable:security_center:6.6.0
-
cpe:2.3:a:tenable:security_center:6.7.0
-
cpe:2.3:a:tenable:security_center:6.7.2
-
cpe:2.3:a:tenable:security_center:6.7.5
-
cpe:2.3:a:tenable:security_center:6.8.0
-
cpe:2.3:o:linux:linux_kernel:-