CVE-2026-64877

high

Tenable

CVSS v3 Base Score

8.4

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:N

EPSS Score

0.2%

Exploitation probability in 30 days

Top 91% most likely to be exploited

Attack Characteristics

Attack Vector

Local

Attack Complexity

Low

Privileges Required

Low

User Interaction

None

Confidentiality

High

Integrity

High

Availability

None

Published: July 21, 2026 (46 days ago)

Last Modified: August 18, 2026

Vendor: Tenable

Source: NVD

Description

An authenticated non-admin user can exploit a SQL injection flaw in the ticketing REST API to access sensitive data stored in the appliance database.

CWE-20

tenable security center