This vulnerability (CVE-2026-19682) involves command injection in Security Center, enabling a remote attacker without authentication to execute arbitrary OS commands with the service account's privileges. The CVSS 3.1 base score is 9.9, reflecting high impact on confidentiality, integrity, and availability. No affected versions or patch information are provided in the available data.

Successful exploitation could lead to full compromise of the affected system under the service account's privileges, potentially allowing an attacker to execute arbitrary commands, disrupt services, and access sensitive data. The vulnerability is remotely exploitable without user interaction and requires no authentication, increasing its risk.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. In the absence of an official fix, restrict network access to the affected Security Center service and monitor for suspicious activity related to command execution attempts.