Tenable vulnerabilities
104 CVEs and advisories name Tenable as an affected vendor, newest first. Follow it as a feed.
- CVE-2026-119317Incorrect Authorization
- CVE-2026-103946SQL Injection
- CVE-2026-106126Command Injection
- CVE-2026-19682Command Injection
- CVE-2026-19681Command Injection
- CVE-2026-19680SQL Injection
- CVE-2026-19679Improper Input Validation
- CVE-2026-19639Improper Access Control
- CVE-2026-19636Insuffucient Protections Lead to Brute Force
- CVE-2026-19635Local Privilege Escalation
- CVE-2026-19631SQL Injection
- CVE-2026-19629Privilege Escalation
- CVE-2026-19628Remote Code Execution
- CVE-2026-19626Remote Code Execution
- CVE-2026-18667Sensor Proxy Version 1.4.2 Fixes One Vulnerability
- CVE-2026-64881Command Injection
- CVE-2026-64880Blind SQL Injection
- CVE-2026-64879Command Injection
- CVE-2026-64878Command Injection
- CVE-2026-64877An authenticated non-admin user can exploit a SQL injection flaw in the ticketing REST API to access sensitive data stored in the appliance
- CVE-2026-15265Tenable Agent Path Traversal Leading to Remote Code Execution
- CVE-2026-57588SQL Injection in Nessus via Malicious Scan Result File Import
- CVE-2026-57587SQL Injection in Nessus via Reverse DNS Lookup
- CVE-2026-13007Insecure Public Caching on REST API Endpoints in Tenable Identity Exposure
- CVE-2026-47358Terrascan v1.18.3 and prior are vulnerable to Server-Side Request Forgery (SSRF) via external URL resolution in uploaded IaC templates when
- CVE-2026-47357Terrascan v1.18.3 and prior are vulnerable to Server-Side Request Forgery (SSRF) via the remote_url parameter in the remote directory scan e
- CVE-2026-47356Terrascan v1.18.3 and prior are vulnerable to Server-Side Request Forgery (SSRF) via the webhook_url parameter in the file scan endpoint (PO
- CVE-2026-33694Junction File Manipulation
- CVE-2026-4433An SSH misconfigurations exists in Tenable OT that led to the potential exfiltration of socket, port, and service information via the ostunn
- CVE-2026-2698Improper Access Control