CVE-2026-19631— SQL Injection
Possible ATT&CK Techniques 3AI
T1005 · Data from Local System T1059.007 · JavaScript T1078 · Valid AccountsAffected Version Matrix 1
| Vendor | Product | Version Range | Status |
|---|---|---|---|
| Tenable, Inc. | Security Center | < 6.9.0 | affected |
Get alerts for future matching vulnerabilitiesLog in to subscribe
I. Basic Information for CVE-2026-19631
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗ Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
SQL Injection
Source: CVE Program / CVE List V5
Vulnerability Description
A SQL injection vulnerability exists in Security Center that could allow an authenticated administrator to execute arbitrary SQL queries, potentially resulting in unauthorized access to sensitive data, including credentials.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N
Source: CVE Program / CVE List V5
Vulnerability Type
SQL命令中使用的特殊元素转义处理不恰当(SQL注入)
Source: CVE Program / CVE List V5
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| Tenable, Inc. | Security Center | 0 ~ 6.9.0 | - |
II. Public POCs for CVE-2026-19631
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POCPremium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2026-19631
请登录查看更多情报信息。
Vendor Advisories for CVE-2026-19631 (1)
Same Patch Batch · Tenable, Inc. · 2026-08-14 · 11 CVEs total
| CVE-2026-19626 | 9.9 CRITICAL | Remote Code Execution |
| CVE-2026-19681 | 9.9 CRITICAL | Command Injection |
| CVE-2026-19682 | 9.9 CRITICAL | Command Injection |
| CVE-2026-19635 | 8.8 HIGH | Local Privilege Escalation |
| CVE-2026-19679 | 8.8 HIGH | Improper Input Validation |
| CVE-2026-19629 | 8.1 HIGH | Privilege Escalation |
| CVE-2026-19628 | 7.2 HIGH | Remote Code Execution |
| CVE-2026-19680 | 7.1 HIGH | SQL Injection |
| CVE-2026-19636 | 5.3 MEDIUM | Insuffucient Protections Lead to Brute Force |
| CVE-2026-19639 | 4.3 MEDIUM | Improper Access Control |
IV. Related Vulnerabilities
Same weakness: CWE-89
- CVE-2026-19923
code-projects Online Shopping System checkout_process.php sq - CVE-2026-19921
code-projects Online Shopping System homeaction.php sql inje - CVE-2026-19920
code-projects Online Shopping System action.php sql injectio - CVE-2026-19919
code-projects Online Shopping System Login login.php sql inj - CVE-2026-19917
code-projects Online Food Order System delete_food_items1.ph
V. Comments for CVE-2026-19631
No comments yet