Tenable, Inc. vulnerabilities

20 vulnerabilities

Known vulnerabilities in Tenable, Inc. products, newest first, with CVSS severity, EPSS, KEV listings and ransomware use, across 7 products.

Products

7
8.7CVE-2026-103946tenable, inc.nessus
EPSS score
0.38%
An SQL injection vulnerability could allow an authenticated user to read or modify data stored by Nessus.6.5CVE-2022-33757tenable, inc.tenable nessus+1
EPSS score
0.86%
An authenticated attacker could read Nessus Debug Log file attachments from the web UI without having the correct privileges to do so. This may lead to the disclosure of information on the scan target and/or the Nessus scan to unauthorized parties able to reach the Nessus instance.9.9CVE-2026-19682tenable, inc.security center+1
EPSS score
2.84%
A command injection vulnerability exists in Security Center where a remote, unauthenticated attacker could exploit this issue to execute arbitrary commands on the underlying operating system with the privileges of the service account.8.8CVE-2026-19679tenable, inc.security center+1
EPSS score
1.60%
An input validation vulnerability exists in Security Center's file upload handling, where insufficient sanitization of uploaded filenames could contribute to a downstream command injection issue.9.9CVE-2026-19626tenable, inc.security center+1
EPSS score
1.85%
A remote code execution vulnerability exists in Tenable Security Center's report generation functionality. An authenticated, non-administrative user could exploit this issue by supplying specially crafted input that is later processed unsafely during server-side report rendering, resulting in arbitrary code execution with the privileges of the service account.5.3CVE-2026-19639tenable, inc.security center+1
EPSS score
0.30%
An improper access control vulnerability exists where an authenticated non-administrative application user could potentially view settings outside of their assigned scope.6CVE-2026-19636tenable, inc.security center+1
EPSS score
0.26%
An issue was identified in which CSRF tokens were generated using a predictable method, potentially reducing their effectiveness as a security control. This has been addressed by improving the randomness and entropy of token generation.8.6CVE-2026-19628tenable, inc.security center+1
EPSS score
2.10%
A command injection vulnerability exists in Tenable Security Center. An authenticated administrator could modify application configuration values to achieve arbitrary command execution on the underlying operating system when specific backend operations are triggered.9.9CVE-2026-19681tenable, inc.security center+1
EPSS score
9.94%
An authenticated command injection vulnerability exists in Security Center related to file upload processing. An attacker could exploit this issue by uploading a specially crafted file, potentially resulting in arbitrary command execution on the underlying operating system.7.1CVE-2026-19680tenable, inc.security center+1
EPSS score
0.32%
A SQL injection vulnerability exists in Security Center that could allow an attacker to access unauthorized data from the application's database.8.6CVE-2026-19629tenable, inc.security center+1
EPSS score
0.39%
A privilege escalation vulnerability exists in Tenable Security Center that allows a user with "Security Manager" role and "manage user" permission on a single group to modify users belonging to other groups. This bypasses the intended access control restrictions and enables unauthorized cross-group user management.6.9CVE-2026-19631tenable, inc.security center+1
EPSS score
0.39%
A SQL injection vulnerability exists in Security Center that could allow an authenticated administrator to execute arbitrary SQL queries, potentially resulting in unauthorized access to sensitive data, including credentials.8.8CVE-2026-19635tenable, inc.security center+1
EPSS score
0.19%
A local privilege escalation vulnerability exists in Security Center. An attacker with write access to a specific configuration file could achieve arbitrary code execution with elevated privileges, without requiring further user or victim interaction.4.3CVE-2026-4433tenable, inc.tenable operation technology+1
EPSS score
0.27%
An SSH misconfigurations exists in Tenable OT that led to the potential exfiltration of socket, port, and service information via the ostunnel user and GatewayPorts. This could be used to potentially glean information about the underlying system and give an attacker information that could be used to attempt to compromise the host.9.6CVE-2026-18667tenable, inc.sensor proxy
EPSS score
0.72%
A vulnerability in Tenable Sensor Proxy allows a remote attacker to execute code with elevated privileges by inducing an operator to connect the sensor to an attacker-controlled host.9.9CVE-2026-106126tenable, inc.tenable identity exposure (saas)
EPSS score
2.02%
A command injection vulnerability in the Active Directory Events Listener of Tenable Identity Exposure (SaaS) allows an authenticated, low-privileged attacker to execute arbitrary commands as SYSTEM on the PDCe.7.1CVE-2026-64880tenable, inc.security center+1
EPSS score
0.32%
Unsanitized user-supplied input in report filtering parameters is concatenated directly into SQL queries without proper escaping or parameterized queries, enabling blind SQL injection and unauthorized database read access.9.9CVE-2026-64878tenable, inc.security center+1
EPSS score
0.80%
Unvalidated input in asset filter parameters allows shell metacharacters to escape command argument handling, resulting in remote code execution as a low-privileged OS user via the Analysis REST endpoint.8.8CVE-2026-64881tenable, inc.security center+1
EPSS score
2.23%
The audit file upload handler does not sanitize filenames, allowing shell metacharacters to flow into system command execution. This input validation failure enables command injection when chained with a related vulnerability.7.8CVE-2026-33694tenable, inc.tenable nessus, tenable nessus agent+2
EPSS score
0.20%
This vulnerability allows an attacker to create a junction, enabling the deletion of arbitrary files with SYSTEM privileges. As a result, this condition potentially facilitates arbitrary code execution, whereby an attacker may exploit the vulnerability to execute malicious code with elevated SYSTEM privileges.