Description
A filename supplied during file upload is not properly sanitized before being used in system command execution, allowing an attacker to inject shell metacharacters and achieve command injection via the audit file upload functionality.
Published: 2026-07-21
Score: 9.4 Critical
EPSS: 2.6% Low
KEV: No
Impact: n/a
Action: n/a
AI Analysis

Impact

The vulnerability allows an attacker to embed shell metacharacters in a filename supplied during file upload, which the system subsequently passes to a shell command unfiltered. This results in arbitrary command execution and can compromise the entire system with elevated privileges. The weakness is classified as CWE-78, reflecting command injection through improper sanitization.

Affected Systems

The issue is present in Tenable, Inc. Security Center. No; the vendor has provided a patch to address the flaw.

Risk and Exploitability

The flaw bears a CVSS score of 9.4, indicating high severity, and an EPSS score of 3%, suggesting a moderate likelihood of exploitation. It is not listed in CISA KEV. The available description implies that the injection can be achieved via the audit file upload functionality, likely requiring authenticated access or privileged user execution to reach the system shell.

Generated by OpenCVE AI on August 4, 2026 at 05:28 UTC.

Remediation

Vendor Solution

Tenable has released Security Center Patch SC202607.1 to address these issues. The installation files can be obtained from the Tenable Downloads Portal:  https://www.tenable.com/downloads/security-center

OpenCVE Recommended Actions

  • Apply Tenable Security Center Patch SC202607.1 immediately.
  • Review and restrict the file upload process to ensure filenames cannot contain shell metacharacters.
  • Deploy network segmentation to limit the exposure of the audit upload endpoint and monitor for abnormal command execution attempts.

Generated by OpenCVE AI on August 4, 2026 at 05:28 UTC.

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

History

Thu, 23 Jul 2026 08:30:00 +0000

Type Values Removed Values Added
First Time appeared Tenable
Tenable security Center
Vendors & Products Tenable
Tenable security Center

Wed, 22 Jul 2026 19:30:00 +0000

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'total'}, 'version': '2.0.3'}

Tue, 21 Jul 2026 20:15:00 +0000

Type Values Removed Values Added
Description A filename supplied during file upload is not properly sanitized before being used in system command execution, allowing an attacker to inject shell metacharacters and achieve command injection via the audit file upload functionality.
Title Command Injection
Weaknesses CWE-78
References
Metrics cvssV3_1

{'score': 9.9, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H'}

cvssV4_0

{'score': 9.4, 'vector': 'CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H'}

Subscriptions

Tenable Security Center
cve-icon MITRE

Status: PUBLISHED

Assigner: tenable

Published:

Updated: 2026-07-24T03:55:54.833Z

Reserved: 2026-07-20T19:19:24.798Z

Link: CVE-2026-64879

cve-icon Vulnrichment

Updated: 2026-07-22T18:15:20.429Z

cve-icon NVD

No data.

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

Updated: 2026-08-04T05:30:04Z

Weaknesses
  • CWE-78

    Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')