CVE-2026-19629: Privilege Escalation

Published Aug 14, 2026

Updated

A privilege escalation vulnerability exists in Tenable Security Center that allows a user with "Security Manager" role and "manage user" permission on a single group to modify users belonging to other groups. This bypasses the intended access control restrictions and enables unauthorized cross-group user management.

Affected Software

1 affected component

Tenable Tenable Security Center

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade Tenable Security Center to a version that resolves this vulnerability.
Fixed in 6.9.0

Event History

Aug 14, 2026

CVE Published

via MITRE·05:04 PM

Data Sourced

via MITRE·05:04 PM

RemedyDescriptionSeverityWeakness

Frequently Asked Questions

What is the severity of CVE-2026-19629?

The severity of CVE-2026-19629 is rated high with a score of 8.1.

How do I fix CVE-2026-19629?

To fix CVE-2026-19629, ensure that users with the 'Security Manager' role are restricted to managing users only within their assigned group.

What systems are affected by CVE-2026-19629?

CVE-2026-19629 affects the Tenable Security Center software.

What type of vulnerability is CVE-2026-19629?

CVE-2026-19629 is a privilege escalation vulnerability.

What permissions allow exploitation of CVE-2026-19629?

A user must have the 'Security Manager' role and 'manage user' permission to exploit CVE-2026-19629.