Security Center
Approved changes feed: RSS · Atom
cpe:2.3:a:tenable,_inc.:security_center:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Tenable, Inc. (3e74d6cd-3a21-582a-94dd-4481b97b8935) |
|---|---|
| Product | Security Center (50aba93d-5bf9-52b2-8691-e9430a32a335) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2026-64881 |
vulnerable | 2026-07-29 01:06:19.901933 |
Command Injection
HIGH (8.8)
The audit file upload handler does not sanitize filenames, allowing shell metacharacters to flow into system command execution. This input validation failure enables command injection when chained with a related vulnerability.
Published: 2026-07-21T20:09:50.741Z
Updated: 2026-07-24T03:55:55.735Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-64880 |
vulnerable | 2026-07-29 01:06:19.901683 |
Blind SQL Injection
HIGH (7.1)
Unsanitized user-supplied input in report filtering parameters is concatenated directly into SQL queries without proper escaping or parameterized queries, enabling blind SQL injection and unauthorized database read access.
Published: 2026-07-21T20:01:28.800Z
Updated: 2026-07-22T18:25:28.118Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-64879 |
not_vulnerable | 2026-07-29 01:06:19.901472 |
Command Injection
CRITICAL (9.9)
A filename supplied during file upload is not properly sanitized before being used in system command execution, allowing an attacker to inject shell metacharacters and achieve command injection via the audit file upload functionality.
Published: 2026-07-21T19:54:06.008Z
Updated: 2026-07-24T03:55:54.833Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-64878 |
vulnerable | 2026-07-29 01:06:19.901243 |
Command Injection
CRITICAL (9.9)
Unvalidated input in asset filter parameters allows shell metacharacters to escape command argument handling, resulting in remote code execution as a low-privileged OS user via the Analysis REST endpoint.
Published: 2026-07-21T19:41:36.053Z
Updated: 2026-07-24T03:55:54.040Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-64877 |
vulnerable | 2026-07-29 01:06:19.900942 |
Details available
HIGH (8.4)
An authenticated non-admin user can exploit a SQL injection flaw in the ticketing REST API to access sensitive data stored in the appliance database.
Published: 2026-07-21T18:06:22.276Z
Updated: 2026-07-24T03:55:53.208Z Reference links |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.