PT-2026-62104 · Tenable · Securitycenter

CVE-2026-64880 · Published 2026-07-21 · Updated 2026-07-21

Mitre

CVSS v3.1

7.1

High

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:N

Unsanitized user-supplied input in report filtering parameters is concatenated directly into SQL queries without proper escaping or parameterized queries, enabling blind SQL injection and unauthorized database read access.

Fix

SQL injection

Weakness Enumeration

CWE-89

Related Identifiers

CVE-2026-64880

Affected Products

Securitycenter

References · 2

• https://nvd.nist.gov/vuln/detail/CVE-2026-64880 · Security Note
• https://tenable.com/security/tns-2026-19 · Note