Tenable
Vulnerability activity for Tenable: what is being exploited, what was published lately, and when the next patch release is due.
Last 30 days
- CVEs
- 3
- Critical (CVSS 9+)
- 1
- Exploited (CISA KEV)
- 0
- With exploit code
- 0
Last 90 days
- CVEs
- 14
- Critical (CVSS 9+)
- 4
- Exploited (CISA KEV)
- 0
- With exploit code
- 2
Last 365 days
- CVEs
- 31
- Critical (CVSS 9+)
- 7
- Exploited (CISA KEV)
- 0
- With exploit code
- 3
Exploited now
None of this vendor's CVEs are on CISA's known-exploited list.
Recent
- 6.5MediumOct 29, 2026Tenable Plugin Feed Auth bypass / access controlCVE-2026-119317On Linux, an authenticated, low-privileged Nessus user with scan-creation rights could read arbitrary text files on the scanner host with the privileges of the nessusd process by running a custom Unix compliance audit against the scanner itself.
- 8.3HighOct 14, 2026Tenable Nessus SQL injectionCVE-2026-103946An SQL injection vulnerability could allow an authenticated user to read or modify data stored by Nessus.
- 9.9CriticalOct 8, 2026Tenable Identity Exposure (SaaS) Code / command injectionCVE-2026-106126A command injection vulnerability in the Active Directory Events Listener of Tenable Identity Exposure (SaaS) allows an authenticated, low-privileged attacker to execute arbitrary commands as SYSTEM on the PDCe.2.2% likely
- 9.9CriticalAug 14, 2026Tenable security center Code / command injectionCVE-2026-19682A command injection vulnerability exists in Security Center where a remote, unauthenticated attacker could exploit this issue to execute arbitrary commands on the underlying operating system with the privileges of the service account.
- 9.9CriticalAug 14, 2026Tenable security center Code / command injectionCVE-2026-19681An authenticated command injection vulnerability exists in Security Center related to file upload processing. An attacker could exploit this issue by uploading a specially crafted file, potentially resulting in arbitrary command execution on the underlying operating system.Metasploit
- 7.1HighAug 14, 2026Tenable security center SQL injectionCVE-2026-19680A SQL injection vulnerability exists in Security Center that could allow an attacker to access unauthorized data from the application's database.
- 8.8HighAug 14, 2026Tenable security center Code / command injectionCVE-2026-19679An input validation vulnerability exists in Security Center's file upload handling, where insufficient sanitization of uploaded filenames could contribute to a downstream command injection issue.
- 4.3MediumAug 14, 2026Tenable security center Auth bypass / access controlCVE-2026-19639An improper access control vulnerability exists where an authenticated non-administrative application user could potentially view settings outside of their assigned scope.
- 5.3MediumAug 14, 2026Tenable security center CSRFCVE-2026-19636An issue was identified in which CSRF tokens were generated using a predictable method, potentially reducing their effectiveness as a security control. This has been addressed by improving the randomness and entropy of token generation.
- 8.8HighAug 14, 2026Tenable security center Code / command injectionCVE-2026-19635A local privilege escalation vulnerability exists in Security Center. An attacker with write access to a specific configuration file could achieve arbitrary code execution with elevated privileges, without requiring further user or victim interaction.
- 4.9MediumAug 14, 2026Tenable security center SQL injectionCVE-2026-19631A SQL injection vulnerability exists in Security Center that could allow an authenticated administrator to execute arbitrary SQL queries, potentially resulting in unauthorized access to sensitive data, including credentials.
- 8.1HighAug 14, 2026Tenable security center Auth bypass / access controlCVE-2026-19629A privilege escalation vulnerability exists in Tenable Security Center that allows a user with "Security Manager" role and "manage user" permission on a single group to modify users belonging to other groups. This bypasses the intended access control restrictions and enables unauthorized cross-group user management.
- 7.2HighAug 14, 2026Tenable security center Code / command injectionCVE-2026-19628A command injection vulnerability exists in Tenable Security Center. An authenticated administrator could modify application configuration values to achieve arbitrary command execution on the underlying operating system when specific backend operations are triggered.
- 9.9CriticalAug 14, 2026Tenable security center Code / command injectionCVE-2026-19626A remote code execution vulnerability exists in Tenable Security Center's report generation functionality. An authenticated, non-administrative user could exploit this issue by supplying specially crafted input that is later processed unsafely during server-side report rendering, resulting in arbitrary code execution with the privileges of the service account.Metasploit
- 8.8HighJul 21, 2026Tenable security center Code / command injectionCVE-2026-64881The audit file upload handler does not sanitize filenames, allowing shell metacharacters to flow into system command execution. This input validation failure enables command injection when chained with a related vulnerability.
- 7.1HighJul 21, 2026Tenable security center SQL injectionCVE-2026-64880Unsanitized user-supplied input in report filtering parameters is concatenated directly into SQL queries without proper escaping or parameterized queries, enabling blind SQL injection and unauthorized database read access.
- 9.9CriticalJul 21, 2026Tenable security center Code / command injectionCVE-2026-64879A filename supplied during file upload is not properly sanitized before being used in system command execution, allowing an attacker to inject shell metacharacters and achieve command injection via the audit file upload functionality.
- 9.9CriticalJul 21, 2026Tenable security center Code / command injectionCVE-2026-64878Unvalidated input in asset filter parameters allows shell metacharacters to escape command argument handling, resulting in remote code execution as a low-privileged OS user via the Analysis REST endpoint.
- 8.4HighJul 21, 2026Tenable security center SQL injectionCVE-2026-64877An authenticated non-admin user can exploit a SQL injection flaw in the ticketing REST API to access sensitive data stored in the appliance database.
- 9.1CriticalJul 14, 2026Tenable nessus agent Path traversal / file handlingCVE-2026-15265A path traversal vulnerability in Tenable Agent 11.2.0 and 11.1.3 and lower allows a privileged attacker to write arbitrary files outside the intended plugin directory, potentially leading to remote code execution.
- 3.3LowJun 25, 2026Tenable nessus SQL injectionCVE-2026-57588A SQL injection vulnerability in Nessus allows an attacker to craft a malicious scan result file that, when imported by a privileged user, injects malicious SQL into the scan results database, potentially enabling exfiltration of scan-result data.Exploit-DB
- 5.3MediumJun 25, 2026Tenable nessus SQL injectionCVE-2026-57587A SQL injection vulnerability in Nessus allows a remote, unauthenticated attacker who controls reverse DNS records for a scanned host to inject malicious SQL into the scan results database, potentially enabling exfiltration of scan-result data.
- 7.5HighJun 23, 2026Tenable identity exposure Auth bypass / access controlCVE-2026-13007Tenable Identity Exposure contains multiple unauthenticated API endpoints under /w/api/* that expose sensitive application configuration data including cleartext LDAP credentials, SAML configuration, user accounts, and directory settings to unauthenticated remote attackers. Affected responses are served with Cache-Control: public headers and without Vary: Cookie, allowing reverse proxies and CDNs to cache and serve sensitive data to unauthenticated users even after authentication is applied.
- 7.5HighMay 19, 2026Tenable terrascan Path traversal / file handlingCVE-2026-47358Terrascan v1.18.3 and prior are vulnerable to Server-Side Request Forgery (SSRF) via external URL resolution in uploaded IaC templates when running in server mode. When Terrascan parses uploaded ARM templates or CloudFormation templates, it resolves external URLs referenced within those templates via hashicorp/go-getter with all default detectors enabled, including FileDetector. An unauthenticated remote attacker can upload an ARM template containing a templateLink.uri or parametersLink.uri fiel
- 7.5HighMay 19, 2026Tenable terrascan Path traversal / file handlingCVE-2026-47357Terrascan v1.18.3 and prior are vulnerable to Server-Side Request Forgery (SSRF) via the remote_url parameter in the remote directory scan endpoint (POST /v1/{iac}/{iacVersion}/{cloud}/remote/dir/scan) when running in server mode. An unauthenticated remote attacker can supply an attacker-controlled HTTP URL as remote_url with remote_type set to "http". The URL is passed directly to hashicorp/go-getter (v1.7.5) without validation. Go-getter's HttpGetter supports the X-Terraform-Get response heade
- 7.5HighMay 19, 2026Tenable terrascan SSRFCVE-2026-47356Terrascan v1.18.3 and prior are vulnerable to Server-Side Request Forgery (SSRF) via the webhook_url parameter in the file scan endpoint (POST /v1/{iac}/{iacVersion}/{cloud}/local/file/scan) when running in server mode. An unauthenticated remote attacker can supply an arbitrary URL as the webhook_url multipart form parameter. After scanning the uploaded file, Terrascan sends an HTTP POST request to the attacker-controlled URL containing the full scan results as a JSON body, with the attacker-sup
- 7.8HighApr 23, 2026Tenable nessus Path traversal / file handlingCVE-2026-33694This vulnerability allows an attacker to create a junction, enabling the deletion of arbitrary files with SYSTEM privileges. As a result, this condition potentially facilitates arbitrary code execution, whereby an attacker may exploit the vulnerability to execute malicious code with elevated SYSTEM privileges.
- 4.3MediumMar 24, 2026Tenable operational technology exposureCVE-2026-4433An SSH misconfigurations exists in Tenable OT that led to the potential exfiltration of socket, port, and service information via the ostunnel user and GatewayPorts. This could be used to potentially glean information about the underlying system and give an attacker information that could be used to attempt to compromise the host.
- 6.5MediumFeb 23, 2026Tenable security center Auth bypass / access controlCVE-2026-2698An improper access control vulnerability exists where an authenticated user could access areas outside of their authorized scope.
- 6.3MediumFeb 23, 2026Tenable security center Auth bypass / access controlCVE-2026-2697An Indirect Object Reference (IDOR) in Security Center allows an authenticated remote attacker to escalate privileges via the 'owner' parameter.
- 6.1MediumFeb 13, 2026Tenable nessus agent Privilege escalationCVE-2026-2026A vulnerability has been identified where weak file permissions in the Nessus Agent directory on Windows hosts could allow unauthorized access, potentially permitting Denial of Service (DoS) attacks.
Top products
- security center18 CVEs in the last year, 5 critical
- Nessus4 CVEs in the last year
- terrascan3 CVEs in the last year
- nessus agent2 CVEs in the last year, 1 critical
- Tenable Identity Exposure (SaaS)1 CVE in the last year, 1 critical
- Plugin Feed1 CVE in the last year
- operational technology exposure1 CVE in the last year
- identity exposure1 CVE in the last year
Counts cover CVEs and advisories Watch Floor tracks, by the date they became news. Updated every 10 minutes.