Tenable vulnerabilities

By year

Bars are flaws published each year; the red part is the share attackers have used.

Latest high and critical flaws

• CVE-2026-103946 An SQL injection vulnerability could allow an authenticated user to read or modify data stored by Nessus.High 8.7 · Oct 14, 2026
• CVE-2026-106126 A command injection vulnerability in the Active Directory Events Listener of Tenable Identity Exposure (SaaS) allows an authenticated, low-privileged attacker tCritical 9.4 · Oct 8, 2026
• CVE-2026-19682 A command injection vulnerability exists in Security Center where a remote, unauthenticated attacker could exploit this issue to execute arbitrary commands on tCritical 9.4 · Aug 14, 2026
• CVE-2026-19681 An authenticated command injection vulnerability exists in Security Center related to file upload processing.Critical 9.4 · Aug 14, 2026
• CVE-2026-19680 A SQL injection vulnerability exists in Security Center that could allow an attacker to access unauthorized data from the application's database.High 7.1 · Aug 14, 2026
• CVE-2026-19679 An input validation vulnerability exists in Security Center's file upload handling, where insufficient sanitization of uploaded filenames could contribute to a High 8.7 · Aug 14, 2026
• CVE-2026-19635 A local privilege escalation vulnerability exists in Security Center.High 8.5 · Aug 14, 2026
• CVE-2026-19629 A privilege escalation vulnerability exists in Tenable Security Center that allows a user with "Security Manager" role and "manage user" permission on a single High 8.6 · Aug 14, 2026
• CVE-2026-19628 A command injection vulnerability exists in Tenable Security Center.High 8.6 · Aug 14, 2026
• CVE-2026-19626 A remote code execution vulnerability exists in Tenable Security Center's report generation functionality.Critical 9.4 · Aug 14, 2026
• CVE-2026-18667 A vulnerability in Tenable Sensor Proxy allows a remote attacker to execute code with elevated privileges by inducing an operator to connect the sensor to an atCritical 9.3 · Aug 3, 2026
• CVE-2026-64881 The audit file upload handler does not sanitize filenames, allowing shell metacharacters to flow into system command execution.High 8.7 · Jul 21, 2026
• CVE-2026-64880 Unsanitized user-supplied input in report filtering parameters is concatenated directly into SQL queries without proper escaping or parameterized queries, enablHigh 7.1 · Jul 21, 2026
• CVE-2026-64879 A filename supplied during file upload is not properly sanitized before being used in system command execution, allowing an attacker to inject shell metacharactCritical 9.4 · Jul 21, 2026
• CVE-2026-64878 Unvalidated input in asset filter parameters allows shell metacharacters to escape command argument handling, resulting in remote code execution as a low-privilCritical 9.4 · Jul 21, 2026
• CVE-2026-64877 An authenticated non-admin user can exploit a SQL injection flaw in the ticketing REST API to access sensitive data stored in the appliance database.Critical 9.4 · Jul 21, 2026
• CVE-2026-15265 A path traversal vulnerability in Tenable Agent 11.2.0 and 11.1.3 and lower allows a privileged attacker to write arbitrary files outside the intended plugin diCritical 9.4 · Jul 14, 2026
• CVE-2026-13007 Tenable Identity Exposure contains multiple unauthenticated API endpoints under /w/api/* that expose sensitive application configuration data including cleartexHigh 8.7 · Jun 23, 2026
• CVE-2026-47358 Terrascan v1.18.3 and prior are vulnerable to Server-Side Request Forgery (SSRF) via external URL resolution in uploaded IaC templates when running in server moCritical 9.2 · May 19, 2026
• CVE-2026-47357 Terrascan v1.18.3 and prior are vulnerable to Server-Side Request Forgery (SSRF) via the remote_url parameter in the remote directory scan endpoint (POST /v1/{iCritical 9.2 · May 19, 2026
• CVE-2026-47356 Terrascan v1.18.3 and prior are vulnerable to Server-Side Request Forgery (SSRF) via the webhook_url parameter in the file scan endpoint (POST /v1/{iac}/{iacVerHigh 8.7 · May 19, 2026
• CVE-2026-33694 This vulnerability allows an attacker to create a junction, enabling the deletion of arbitrary files with SYSTEM privileges.High 7.4 · Apr 23, 2026
• CVE-2026-2630 A Command Injection vulnerability exists where an authenticated, remote attacker could execute arbitrary code on the underlying server where Tenable Security CeHigh 7.4 · Feb 17, 2026
• CVE-2025-36640 A vulnerability has been identified in the installation/uninstallation of the Nessus Agent Tray App on Windows Hosts which could lead to escalation of privilegeHigh 7.3 · Jan 13, 2026
• CVE-2025-36630 In Tenable Nessus versions prior to 10.8.5 on a Windows host, it was found that a non-administrative user could overwrite arbitrary local system files with log High 8.4 · Jul 1, 2025