Tenable vulnerabilities
104 CVEs and advisories name Tenable as an affected vendor, newest first. Follow it as a feed.
- CVE-2026-2697Indirect Object Reference (IDOR) in Security Center
- CVE-2026-2630[R1] Stand-alone Security Patches Available for Tenable Security Center versions 6.5.1, 6.6.0 and 6.7.2: SC-202602.1 + SC-202602.2
- CVE-2026-2026Improper Access Control Allows Denial of Service
- CVE-2025-36640Local Privilege Escalation
- CVE-2025-36636Improper Access Control
- CVE-2025-36630Local Privilege Escalation
- CVE-2025-36632Local Privilege Escalation
- CVE-2025-36631Local Privilege Escalation
- CVE-2025-36633Local Privilege Escalation
- CVE-2025-24917Improper Access Control leads to Local Privilege Escalation
- CVE-2025-24916Improper Access Control leads to Local Priviledge Escalation
- CVE-2025-36625Log Poisoning in Nessus
- CVE-2025-24914Local Priviledge Escalation
- CVE-2025-24915When installing Nessus Agent to a non-default location on a Windows host, Nessus Agent versions prior to 10.8.3 did not enforce secure permi
- CVE-2025-0760Stored Credential Disclosure Vulnerability
- CVE-2025-1091Broken Authorization Schema
- CVE-2024-12174An Improper Certificate Validation vulnerability exists in Tenable Security Center where an authenticated, privileged attacker could interce
- CVE-2024-9158XSS
- CVE-2024-3232Formula Injection Vulnerability
- CVE-2024-5759Improper privilege management
- CVE-2024-1891Stored Cross Site Scripting
- CVE-2024-3292Race Condition
- CVE-2024-3291Privilege Escalation
- CVE-2024-3290Race Condition
- CVE-2024-3289When installing Nessus to a directory outside of the default location on a Windows host, Nessus versions prior to 10.7.3 did not enforce sec
- CVE-2024-2390Local Privilege Escalation
- CVE-2024-1683DLL Injection in Tenable Identity Exposure Secure Relay
- CVE-2024-1471HTML Injection Vulnerability
- CVE-2024-1367Command Injection Vulnerability in Tenable Security Center
- CVE-2024-0971 A SQL injection vulnerability exists where an authenticated, low-privileged remote attacker could potentially alter scan DB content.