TenableCVE-2026-19680

Tenable Security Center: SQL injection

High7.1CVE-2026-19680 · Published Aug 14, 2026 · updated Aug 19, 2026

A SQL injection vulnerability exists in Security Center that could allow an attacker to access unauthorized data from the application's database.

Affected versions

Package	Affected	Fixed in
Security Center Product	< 6.9.0	6.9.0

Details and references

CVSS 4.0: CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Severity from: the vendor (its own CVE record or advisory)
Weakness: CWE-89

Date	Advisory	Severity	Fixed in
Aug 14	Tenable Security Center: improper access control Medium5.3Aug 14 CVE-2026-196396.9.0	Medium5.3	6.9.0
Aug 14	Tenable Security Center: command injection High8.7Aug 14 CVE-2026-196796.9.0	High8.7	6.9.0
Aug 14	Tenable Security Center: command injection Critical9.4Aug 14 CVE-2026-196816.9.0	Critical9.4	6.9.0
Aug 14	Tenable Security Center: command injection Critical9.4Aug 14 CVE-2026-196826.9.0	Critical9.4	6.9.0
Aug 14	Tenable Security Center: privilege escalation High8.6Aug 14 CVE-2026-196296.9.0	High8.6	6.9.0
Aug 14	Tenable Security Center: SQL injection Medium6.9Aug 14 CVE-2026-196316.9.0	Medium6.9	6.9.0