This vulnerability (CVE-2026-19628) in Tenable Security Center involves improper neutralization of special elements used in OS commands (CWE-78). An authenticated administrator can modify configuration values in the application to trigger arbitrary command execution on the underlying operating system during certain backend operations. The vulnerability is rated high severity with a CVSS 3.1 base score of 7.2, reflecting network attack vector, low attack complexity, high privileges required, no user interaction, and high impact on confidentiality, integrity, and availability. No vendor advisory or patch information is provided at this time.

An attacker with authenticated administrator access can execute arbitrary commands on the underlying OS, potentially leading to full system compromise, data loss, or service disruption. The impact affects confidentiality, integrity, and availability of the affected system.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, restrict administrator access to trusted personnel only and monitor for suspicious configuration changes.