TE
Vendor
Tenable
26 products with CVEs on record
238
CVEs
3
On KEV
0
New 30D
Products
Recent CVEs
CVEProductCVSSEPSSPublishedSummary
CVE-2026-19682
SC
Security Center
Tenable
9.9
2%
Aug 14Command Injection
CVE-2026-19681
SC
Security Center
Tenable
9.9
4%
Aug 14Command Injection
CVE-2026-19680
SC
Security Center
Tenable
7.1
0%
Aug 14SQL Injection
CVE-2026-19679
SC
Security Center
Tenable
8.8
2%
Aug 14Improper Input Validation
CVE-2026-19639
SC
Security Center
Tenable
4.3
0%
Aug 14Improper Access Control
CVE-2026-19636
SC
Security Center
Tenable
5.3
0%
Aug 14Insuffucient Protections Lead to Brute Force
CVE-2026-19635
SC
Security Center
Tenable
8.8
0%
Aug 14Local Privilege Escalation
CVE-2026-19631
SC
Security Center
Tenable
4.9
0%
Aug 14SQL Injection
CVE-2026-19629
SC
Security Center
Tenable
8.1
0%
Aug 14Privilege Escalation
CVE-2026-19628
SC
Security Center
Tenable
7.2
2%
Aug 14Remote Code Execution
CVE-2026-19626
SC
Security Center
Tenable
9.9
2%
Aug 14Remote Code Execution
CVE-2026-64881
SC
Security Center
Tenable
8.8
2%
Jul 21Command Injection
CVE-2026-64880
SC
Security Center
Tenable
7.1
0%
Jul 21Blind SQL Injection
CVE-2026-64879
SC
Security Center
Tenable
9.9
2%
Jul 21Command Injection
CVE-2026-64878
SC
Security Center
Tenable
9.9
1%
Jul 21Command Injection
CVE-2026-64877
SC
Security Center
Tenable
8.4
0%
Jul 21An authenticated non-admin user can exploit a SQL injection flaw in the ticketing REST API to access sensitive data stored in the appliance database
CVE-2026-15265
TE
tenable_agent
tenable
9.1
1%
Jul 14Tenable Agent Path Traversal Leading to Remote Code Execution
CVE-2026-57588
NE
Nessus
tenable
3.3
0%
Jun 25SQL Injection in Nessus via Malicious Scan Result File Import
CVE-2026-57587
NE
Nessus
tenable
5.3
0%
Jun 25SQL Injection in Nessus via Reverse DNS Lookup
CVE-2026-13007
TI
Tenable Identity Exposure
tenable
7.5
1%
Jun 23Insecure Public Caching on REST API Endpoints in Tenable Identity Exposure
CVE-2026-47358
TE
Terrascan
tenable
8.6
0%
May 19Terrascan v1.18.3 and prior are vulnerable to Server-Side Request Forgery (SSRF) via external URL resolution in uploaded IaC templates when running in server mode
CVE-2026-47357
TE
Terrascan
tenable
8.6
0%
May 19Terrascan v1.18.3 and prior are vulnerable to Server-Side Request Forgery (SSRF) via the remote_url parameter in the remote directory scan endpoint (POST…
CVE-2026-47356
TE
Terrascan
tenable
8.6
0%
May 19Terrascan v1.18.3 and prior are vulnerable to Server-Side Request Forgery (SSRF) via the webhook_url parameter in the file scan endpoint (POST…
CVE-2026-33694
NE
Nessus
Tenable
7.8
0%
Apr 23Junction File Manipulation
CVE-2026-4433
OT
Operational Technology Exposure
Tenable
4.3
0%
Mar 24An SSH misconfigurations exists in Tenable OT that led to the potential exfiltration of socket, port, and service information via the ostunnel user and GatewayPorts
CVE-2026-2698
SC
Security Center
Tenable
6.5
0%
Feb 23Improper Access Control
CVE-2026-2697
SC
Security Center
Tenable
8.8
0%
Feb 23Indirect Object Reference (IDOR) in Security Center
CVE-2026-2630
SC
Security Center
Tenable
8.8
1%
Feb 17[R1] Stand-alone Security Patches Available for Tenable Security Center versions 6.5.1, 6.6.0 and 6.7.2: SC-202602.1 + SC-202602.2
CVE-2026-2026
AG
Agent
Tenable
6.1
0%
Feb 13Improper Access Control Allows Denial of Service
CVE-2025-36640
NA
Nessus Agent
Tenable
8.8
0%
Jan 13Local Privilege Escalation
CVE-2025-36636
SC
Security Center
Tenable
4.3
0%
Oct 8Improper Access Control
CVE-2025-36630
NE
Nessus
Tenable
7.1
0%
Jul 1Local Privilege Escalation
CVE-2025-36632
AG
Agent
Tenable
7.8
0%
Jun 16Local Privilege Escalation
CVE-2025-36631
AG
Agent
Tenable
7.8
0%
Jun 13Local Privilege Escalation
CVE-2025-36633
AG
Agent
Tenable
7.8
0%
Jun 13Local Privilege Escalation
CVE-2025-24917
NM
Network Monitor
Tenable
7.8
0%
May 23Improper Access Control leads to Local Privilege Escalation
CVE-2025-24916
NM
Network Monitor
Tenable
7.8
0%
May 23Improper Access Control leads to Local Priviledge Escalation
CVE-2025-36625
NE
Nessus
Tenable
4.3
0%
Apr 18Log Poisoning in Nessus
CVE-2025-24914
NE
Nessus
Tenable
7.8
0%
Apr 18Local Priviledge Escalation
CVE-2025-24915
NA
Nessus Agent
Tenable
7.8
0%
Mar 21When installing Nessus Agent to a non-default location on a Windows host, Nessus Agent versions prior to 10.8.3 did not enforce secure permissions for sub-directories
CVE-2025-0760
TI
Tenable Identity Exposure
Tenable
2.7
0%
Feb 25Stored Credential Disclosure Vulnerability
CVE-2025-1091
TI
Tenable Identity Exposure
Tenable
4.3
0%
Feb 25Broken Authorization Schema
CVE-2024-12174
SC
Security Center
Tenable
2.7
0%
Dec 9An Improper Certificate Validation vulnerability exists in Tenable Security Center where an authenticated, privileged attacker could intercept email messages sent from Security…
CVE-2024-9158
NN
Nessus Network Monitor
Tenable
4.6
0%
Sep 30A stored cross site scripting vulnerability exists in Nessus Network Monitor where an authenticated, privileged local attacker could inject arbitrary code into the NNM UI via the local CLI.
CVE-2024-3232
TI
Tenable Identity Exposure
Tenable
6.8
0%
Jul 16Formula Injection Vulnerability
CVE-2024-5759
SC
Security Center
Tenable
6.3
0%
Jun 12Improper privilege management
CVE-2024-1891
SC
Security Center
Tenable
5.4
0%
Jun 12Stored Cross Site Scripting
CVE-2024-3292
NA
Nessus Agent
Tenable
8.2
0%
May 17Race Condition
CVE-2024-3291
NA
Nessus Agent
Tenable
7.8
0%
May 17Privilege Escalation
CVE-2024-3290
NE
Nessus
Tenable
8.2
0%
May 17Race Condition
CVE-2024-3289
NE
Nessus
Tenable
7.8
0%
May 17When installing Nessus to a directory outside of the default location on a Windows host, Nessus versions prior to 10.7.3 did not enforce secure permissions for sub-directories
CVE-2024-2390
NA
Nessus Agent
Tenable
7.8
0%
Mar 18Local Privilege Escalation
CVE-2024-1683
TI
Tenable Identity Exposure Secure Relay
Tenable
7.3
0%
Feb 23DLL Injection in Tenable Identity Exposure Secure Relay
CVE-2024-1471
SC
Security Center
Tenable
4.8
0%
Feb 14HTML Injection Vulnerability
CVE-2024-1367
SC
Security Center
Tenable
7.2
2%
Feb 14Command Injection Vulnerability in Tenable Security Center
CVE-2024-0971
NE
Nessus
Tenable
6.5
1%
Feb 6A SQL injection vulnerability exists where an authenticated, low-privileged remote attacker could potentially alter scan DB content
CVE-2024-0955
NE
Nessus
Tenable
4.8
1%
Feb 6Stored XSS vulnerability
CVE-2023-6178
NE
Nessus
Tenable
6.5
1%
Nov 20An arbitrary file write vulnerability exists where an authenticated attacker with privileges on the managing application could alter Nessus Rules variables to overwrite arbitrary…
CVE-2023-6062
NE
Nessus
Tenable
6.5
1%
Nov 20An arbitrary file write vulnerability exists where an authenticated, remote attacker with administrator privileges on the Nessus application could alter Nessus Rules variables to…
CVE-2023-5847
NA
Nessus Agent
Tenable
7.3
0%
Nov 1Under certain conditions, a low privileged attacker could load a specially crafted file during installation or upgrade to escalate privileges on Windows and Linux hosts