TE
Vendor
Tenable
238
CVEs
3
On KEV
0
New 30D
Products
TE9.8
Tenable.sc
Tenable
46 CVEs2 on KEV0 new
LC9.8
Log Correlation Engine
Tenable
8 CVEs1 on KEV0 new
NE9.8
Nessus
tenable
73 CVEs0 on KEV0 new
SC9.9
Security Center
Tenable
35 CVEs0 on KEV0 new
NA9.1
Nessus Agent
Tenable
18 CVEs0 on KEV0 new
NN9.8
Nessus Network Monitor
Tenable
14 CVEs0 on KEV0 new
AL9.8
Alcatel Lucent I-240W-Q GPON ONT
Tenable
6 CVEs0 on KEV0 new
AG7.8
Agent
Tenable
4 CVEs0 on KEV0 new
AP9.8
Appliance
Tenable
4 CVEs0 on KEV0 new
TI7.5
Tenable Identity Exposure
tenable
4 CVEs0 on KEV0 new
IE7.5
Identity Exposure
Tenable
3 CVEs0 on KEV0 new
LS6.1
LabKey Server Community Edition
Tenable
3 CVEs0 on KEV0 new
TE8.6
Terrascan
tenable
3 CVEs0 on KEV0 new
NM7.8
Network Monitor
Tenable
2 CVEs0 on KEV0 new
SE8.8
SecurityCenter
Tenable
2 CVEs0 on KEV0 new
TE8.8
Tenable.io
Tenable
2 CVEs0 on KEV0 new
WU–
Web UI
Tenable
2 CVEs0 on KEV0 new
JC8.6
Jira Cloud
Tenable
1 CVEs0 on KEV0 new
MR7.5
MikroTik RouterOS
Tenable
1 CVEs0 on KEV0 new
NA5.9
Nessus Amazon Machine Image
Tenable
1 CVEs0 on KEV0 new
OT4.3
Operational Technology Exposure
Tenable
1 CVEs0 on KEV0 new
PF8.8
Plugin Feed
Tenable
1 CVEs0 on KEV0 new
PL–
Plugin-set
Tenable
1 CVEs0 on KEV0 new
TE9.1
tenable_agent
tenable
1 CVEs0 on KEV0 new
TI7.3
Tenable Identity Exposure Secure Relay
Tenable
1 CVEs0 on KEV0 new
TN5.4
Tenable Nessus
Tenable
1 CVEs0 on KEV0 new
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-19682 | SC Security Center Tenable | 9.9 | Aug 14 | Command Injection |
| CVE-2026-19681 | SC Security Center Tenable | 9.9 | Aug 14 | Command Injection |
| CVE-2026-19680 | SC Security Center Tenable | 7.1 | Aug 14 | SQL Injection |
| CVE-2026-19679 | SC Security Center Tenable | 8.8 | Aug 14 | Improper Input Validation |
| CVE-2026-19639 | SC Security Center Tenable | 4.3 | Aug 14 | Improper Access Control |
| CVE-2026-19636 | SC Security Center Tenable | 5.3 | Aug 14 | Insuffucient Protections Lead to Brute Force |
| CVE-2026-19635 | SC Security Center Tenable | 8.8 | Aug 14 | Local Privilege Escalation |
| CVE-2026-19631 | SC Security Center Tenable | 4.9 | Aug 14 | SQL Injection |
| CVE-2026-19629 | SC Security Center Tenable | 8.1 | Aug 14 | Privilege Escalation |
| CVE-2026-19628 | SC Security Center Tenable | 7.2 | Aug 14 | Remote Code Execution |
| CVE-2026-19626 | SC Security Center Tenable | 9.9 | Aug 14 | Remote Code Execution |
| CVE-2026-64881 | SC Security Center Tenable | 8.8 | Jul 21 | Command Injection |
| CVE-2026-64880 | SC Security Center Tenable | 7.1 | Jul 21 | Blind SQL Injection |
| CVE-2026-64879 | SC Security Center Tenable | 9.9 | Jul 21 | Command Injection |
| CVE-2026-64878 | SC Security Center Tenable | 9.9 | Jul 21 | Command Injection |
| CVE-2026-64877 | SC Security Center Tenable | 8.4 | Jul 21 | An authenticated non-admin user can exploit a SQL injection flaw in the ticketing REST API to access sensitive data stored in the appliance database |
| CVE-2026-15265 | TE tenable_agent tenable | 9.1 | Jul 14 | Tenable Agent Path Traversal Leading to Remote Code Execution |
| CVE-2026-57588 | NE Nessus tenable | 3.3 | Jun 25 | SQL Injection in Nessus via Malicious Scan Result File Import |
| CVE-2026-57587 | NE Nessus tenable | 5.3 | Jun 25 | SQL Injection in Nessus via Reverse DNS Lookup |
| CVE-2026-13007 | TI Tenable Identity Exposure tenable | 7.5 | Jun 23 | Insecure Public Caching on REST API Endpoints in Tenable Identity Exposure |
| CVE-2026-47358 | TE Terrascan tenable | 8.6 | May 19 | Terrascan v1.18.3 and prior are vulnerable to Server-Side Request Forgery (SSRF) via external URL resolution in uploaded IaC templates when running in server mode |
| CVE-2026-47357 | TE Terrascan tenable | 8.6 | May 19 | Terrascan v1.18.3 and prior are vulnerable to Server-Side Request Forgery (SSRF) via the remote_url parameter in the remote directory scan endpoint (POST… |
| CVE-2026-47356 | TE Terrascan tenable | 8.6 | May 19 | Terrascan v1.18.3 and prior are vulnerable to Server-Side Request Forgery (SSRF) via the webhook_url parameter in the file scan endpoint (POST… |
| CVE-2026-33694 | NE Nessus Tenable | 7.8 | Apr 23 | Junction File Manipulation |
| CVE-2026-4433 | OT Operational Technology Exposure Tenable | 4.3 | Mar 24 | An SSH misconfigurations exists in Tenable OT that led to the potential exfiltration of socket, port, and service information via the ostunnel user and GatewayPorts |
| CVE-2026-2698 | SC Security Center Tenable | 6.5 | Feb 23 | Improper Access Control |
| CVE-2026-2697 | SC Security Center Tenable | 8.8 | Feb 23 | Indirect Object Reference (IDOR) in Security Center |
| CVE-2026-2630 | SC Security Center Tenable | 8.8 | Feb 17 | [R1] Stand-alone Security Patches Available for Tenable Security Center versions 6.5.1, 6.6.0 and 6.7.2: SC-202602.1 + SC-202602.2 |
| CVE-2026-2026 | AG Agent Tenable | 6.1 | Feb 13 | Improper Access Control Allows Denial of Service |
| CVE-2025-36640 | NA Nessus Agent Tenable | 8.8 | Jan 13 | Local Privilege Escalation |
| CVE-2025-36636 | SC Security Center Tenable | 4.3 | Oct 8 | Improper Access Control |
| CVE-2025-36630 | NE Nessus Tenable | 7.1 | Jul 1 | Local Privilege Escalation |
| CVE-2025-36632 | AG Agent Tenable | 7.8 | Jun 16 | Local Privilege Escalation |
| CVE-2025-36631 | AG Agent Tenable | 7.8 | Jun 13 | Local Privilege Escalation |
| CVE-2025-36633 | AG Agent Tenable | 7.8 | Jun 13 | Local Privilege Escalation |
| CVE-2025-24917 | NM Network Monitor Tenable | 7.8 | May 23 | Improper Access Control leads to Local Privilege Escalation |
| CVE-2025-24916 | NM Network Monitor Tenable | 7.8 | May 23 | Improper Access Control leads to Local Priviledge Escalation |
| CVE-2025-36625 | NE Nessus Tenable | 4.3 | Apr 18 | Log Poisoning in Nessus |
| CVE-2025-24914 | NE Nessus Tenable | 7.8 | Apr 18 | Local Priviledge Escalation |
| CVE-2025-24915 | NA Nessus Agent Tenable | 7.8 | Mar 21 | When installing Nessus Agent to a non-default location on a Windows host, Nessus Agent versions prior to 10.8.3 did not enforce secure permissions for sub-directories |
| CVE-2025-0760 | TI Tenable Identity Exposure Tenable | 2.7 | Feb 25 | Stored Credential Disclosure Vulnerability |
| CVE-2025-1091 | TI Tenable Identity Exposure Tenable | 4.3 | Feb 25 | Broken Authorization Schema |
| CVE-2024-12174 | SC Security Center Tenable | 2.7 | Dec 9 | An Improper Certificate Validation vulnerability exists in Tenable Security Center where an authenticated, privileged attacker could intercept email messages sent from Security… |
| CVE-2024-9158 | NN Nessus Network Monitor Tenable | 4.6 | Sep 30 | A stored cross site scripting vulnerability exists in Nessus Network Monitor where an authenticated, privileged local attacker could inject arbitrary code into the NNM UI via the local CLI. |
| CVE-2024-3232 | TI Tenable Identity Exposure Tenable | 6.8 | Jul 16 | Formula Injection Vulnerability |
| CVE-2024-5759 | SC Security Center Tenable | 6.3 | Jun 12 | Improper privilege management |
| CVE-2024-1891 | SC Security Center Tenable | 5.4 | Jun 12 | Stored Cross Site Scripting |
| CVE-2024-3292 | NA Nessus Agent Tenable | 8.2 | May 17 | Race Condition |
| CVE-2024-3291 | NA Nessus Agent Tenable | 7.8 | May 17 | Privilege Escalation |
| CVE-2024-3290 | NE Nessus Tenable | 8.2 | May 17 | Race Condition |
| CVE-2024-3289 | NE Nessus Tenable | 7.8 | May 17 | When installing Nessus to a directory outside of the default location on a Windows host, Nessus versions prior to 10.7.3 did not enforce secure permissions for sub-directories |
| CVE-2024-2390 | NA Nessus Agent Tenable | 7.8 | Mar 18 | Local Privilege Escalation |
| CVE-2024-1683 | TI Tenable Identity Exposure Secure Relay Tenable | 7.3 | Feb 23 | DLL Injection in Tenable Identity Exposure Secure Relay |
| CVE-2024-1471 | SC Security Center Tenable | 4.8 | Feb 14 | HTML Injection Vulnerability |
| CVE-2024-1367 | SC Security Center Tenable | 7.2 | Feb 14 | Command Injection Vulnerability in Tenable Security Center |
| CVE-2024-0971 | NE Nessus Tenable | 6.5 | Feb 6 | A SQL injection vulnerability exists where an authenticated, low-privileged remote attacker could potentially alter scan DB content |
| CVE-2024-0955 | NE Nessus Tenable | 4.8 | Feb 6 | Stored XSS vulnerability |
| CVE-2023-6178 | NE Nessus Tenable | 6.5 | Nov 20 | An arbitrary file write vulnerability exists where an authenticated attacker with privileges on the managing application could alter Nessus Rules variables to overwrite arbitrary… |
| CVE-2023-6062 | NE Nessus Tenable | 6.5 | Nov 20 | An arbitrary file write vulnerability exists where an authenticated, remote attacker with administrator privileges on the Nessus application could alter Nessus Rules variables to… |
| CVE-2023-5847 | NA Nessus Agent Tenable | 7.3 | Nov 1 | Under certain conditions, a low privileged attacker could load a specially crafted file during installation or upgrade to escalate privileges on Windows and Linux hosts |
