VULNERABILITY INTELLIGENCE

CVE-2026-19682

CVSS score9.4 CRITICAL
EPSS probability1.97%
CISA KEVNot currently listed
Published2026-08-14
Last modified2026-08-19
CVSS vectorCVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H

Description

A command injection vulnerability exists in Security Center where a remote, unauthenticated attacker could exploit this issue to execute arbitrary commands on the underlying operating system with the privileges of the service account.

Weakness classification

  • CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')

Primary references