CVE-2026-19631

MediumCVSS 4.9/10Last modified Aug 19, 2026

Description

A SQL injection vulnerability exists in Security Center that could allow an authenticated administrator to execute arbitrary SQL queries, potentially resulting in unauthorized access to sensitive data, including credentials.

Metrics

CVSS 3.1 4.9/10CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N

Weakness enumeration

CWE-89

Affected software

VendorProductVersions
Tenable, Inc.Security Center< 6.9.0

References

Timeline

Published
Aug 14, 2026
Last modified
Aug 19, 2026
NVD status
Analyzed

Related CVEs from 2026

CVE-2026-196329.8The TranslatePress – Translate Multilingual sites with AI Translation plugin for WordPress is vulnerable to Sensitive Information Exposure iCVE-2026-196338.8PostgreSQL Anonymizer contains a vulnerability that allows unprivileged masked users to execute arbitrary code by abusing operators, domain CVE-2026-196346.4PostgreSQL Anonymizer contains a SQL injection vulnerability in two import functions. A user can create a malicious JSON document containingCVE-2026-196358.8A local privilege escalation vulnerability exists in Security Center. An attacker with write access to a specific configuration file could aCVE-2026-196365.3An issue was identified in which CSRF tokens were generated using a predictable method, potentially reducing their effectiveness as a securiCVE-2026-196394.3An improper access control vulnerability exists where an authenticated non-administrative application user could potentially view settings oCVE-2026-19645.3A vulnerability was determined in WeKan up to 8.20. This impacts an unknown function of the file models/boards.js of the component REST EndpCVE-2026-196404.2On affected platforms running Arista EOS, an authenticated user with access to the gNMI (gRPC Network Management Interface) may receive incoCVE-2026-196415.3On affected platforms running Arista EOS with password authentication configured, a specially crafted password can create orphan authenticatCVE-2026-196425.9An out-of-bounds write issue in the Base64 decoder in Amazon aws-sdk-cpp before 1.11.862 might allow a remote authenticated user to cause a CVE-2026-196435.3An out-of-bounds read issue in the Base64 decoder in Amazon aws-sdk-cpp before 1.11.862, on some platforms, might allow a remote authenticatCVE-2026-196445.4Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An attacker could exploit this issue by manipu