CVE-2026-19681

CRITICAL

CVE: CVE-2026-19681 - An authenticated command injection vulnerability exists in Security Center related to file upload processingSign in to save

CVSS

9.9

CVSS v3.1

EPSS

N/A

Exploit Prediction Score

Published

August 14, 2026

Exploitability

No EPSS data available

Description

An authenticated command injection vulnerability exists in Security Center related to file upload processing. An attacker could exploit this issue by uploading a specially crafted file, potentially resulting in arbitrary command execution on the underlying operating system.

Weaknesses

CWE-78

Affected Packages

No package data available.

Aliases

CVE-2026-19681

Related references

Publisher and database URLs for this record (shown for attribution; reading stays in Bugflare).

https://www.tenable.com/security/tns-2026-22