[R2] Security Center Version 6.9.0 Fixes Multiple Vulnerabilities
CVE-2026-19639CVE-2026-19680CVE-2026-19681+1sqli
[R2] Security Center Version 6.9.0 Fixes Multiple Vulnerabilities Arnie Cabral Thu, 08/13/2026 - 10:35 Security Center leverages third-party software to help provide underlying functionality. Several of the third-party components (curl, underscoreJS) were found to contain vulnerabilities, and updated versions have been made available by the providers. Out of caution and in line with best practice, Tenable has opted to upgrade these libraries to address the potential impact of the issues. Security Center 6.9.0 updates the following components:curl to version 8.20underscoreJS to version 1.13.8Additionally, several vulnerabilities were reported to Tenable and addressed within this update. Please see the full list of resolved issues below.ComponentCVE ID Severity CVSS v3 BaseCVSS v3 Temporal CVSS v3 VectorSecurity Center - Improper Access ControlCVE-2026-19639Medium4.33.9AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N/E:P/RL:O/RC:CSecurity Center - OS Command InjectionCVE-2026-19682Critical9.09.0AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:HSecurity Center - OS Command InjectionCVE-2026-19681Critical9.98.9AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:P/RL:O/RC:CSecurity Center - SQL InjectionCVE-2026-19680High7.16.4AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:N/E:P/RL:O/RC:CSecurity Center - OS Command InjectionCVE-2026-19679High8.87.9AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:CSecurity Center - Brute Force EnumerationCVE-2026-19636Medium5.34.8AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:H/A:N/E:P/RL:O/RC:CSecurity Center - Local