VulnSocial

CVE-2026-64879Patch(linux / linux_kernel)

LOWCVSS 9.4 · CRITICAL

Signal is active with 1 mentions in latest observed window

Immediate actions

  • Patch linux linux_kernel systems immediately

Recommended action window: Monitor and triage in normal cycle

NVD description

A filename supplied during file upload is not properly sanitized before being used in system command execution, allowing an attacker to inject shell metacharacters and achieve command injection via the audit file upload functionality.

linux CVEsBack to dashboard
1.0/ 10 priority

Sources & remediation

Patch / fix
Weakness type (CWE)
CWE-78

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

AVAILABLE

Momentum

NONE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

  • linux_kernel
  • security_center

Threat summary

  • Patch or workaround signal is available
  • 1 mentions across 1 observed day

What's happening

  • Patch or workaround mentioned in 1 signal
  • Technical details provided in 1 signal
  • 1 total mentions across 1 day

Affected systems

Vendors
linuxtenable
Products
linux_kernelsecurity_center

1 version affected across 2 products

Deep dive

Activity timeline1 mentions / 1d
00111Mentions · 2026-07-27: 1Patch / Workaround · 2026-07-27: 1Technical Details · 2026-07-27: 107-27
Signal classification1 categories
Patch
1100.0%
Referenced assets1 URL
By indicator
Full discourse1 post
  • CCB Alert@CCBalert
    Patch

    Warning: #Tenable Security Center is affected by multiple high-severity vulnerabilities! Critical #CVE-2026-64879 (CVSS:9.9) and CVE-2026-64878 (CVSS:9.9) both allow attackers to inject commands leading to #RCE! Tenable advisory at: https://www.tenable.com/security/tns-2026-19 #Patch #Patch #Patch

    Post summary

    Tenable Security Center is affected by two critical CVEs (CVSS 9.9) that allow command injection and RCE; an advisory and patch are available via Tenable's website.

    01000317
    7.2K followersView on X
CPE platform detail2 entries

2 of 2 entries

PartVendorProductVersionTarget SWTarget HW
OSlinuxlinux_kernel---
Apptenablesecurity_center---

Explore more

Back to dashboardlinux CVEstenable CVEslinux_kernel vulnerabilities