Exploit for CVE-2026-19681

cve · 2026-08-14

Description

Authenticated command injection in Security Center via crafted file upload enables arbitrary OS command execution.

Affected Tenable Security Center versions

Tenable Security Center< 6.9.0

CVSS 9.9 for CVE-2026-19681

9.9

HIGH SEVERITY

Version 3.1

VectorCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

Attack Vector:NETWORK

Attack Complexity:LOW

Attack Requirements:NONE

Privileges Required:LOW

User Interaction:NONE

EPSS Score

2.8%higher than 85.3% of all CVEs

Updated 2026-08-26

CVE Information

CVE-2026-19681

References

https://www.tenable.com/security/tns-2026-22

Exploit Details

Modified:2026-08-19 16:47

Last Seen:2026-08-19 18:39

Reporter:tenable

Other exploits for CVE-2026-19681

POC-CVE-2026-19681

2026-08-25 KitPloitKITPLOIT

Exploit for OS Command Injection in Tenable Security_Center

2026-08-24 h00dieGITHUB

poc_cve_2026_19681

2026-08-23 h00dieGITHUB

Exploit Code

MARKDOWN2 lines

## https://sploitus.com/exploit?id=CVE-2026-19681
An authenticated command injection vulnerability exists in Security Center related to file upload processing. An attacker could exploit this issue by uploading a specially crafted file, potentially resulting in arbitrary command execution on the underlying operating system.

Exploit Code

Share

Share on social media: