Tenable

18 CVEs published in the last four months and 1 stories. Exploited flaws first.

Critical6

High12

Medium0

Exploited (KEV)0

All recent CVEs

CVE	CVSS	Severity	Product	Summary	Published
CVE-2026-64878	9.9	critical	security center	Unvalidated input in asset filter parameters allows shell metacharacters to escape command argument handling, resu	46d ago
CVE-2026-19682	9.9	critical	security center	A command injection vulnerability exists in Security Center where a remote, unauthenticated attacker could exploit	22d ago
CVE-2026-19681	9.9	critical	security center	An authenticated command injection vulnerability exists in Security Center related to file upload processing.	22d ago
CVE-2026-19626	9.9	critical	security center	A remote code execution vulnerability exists in Tenable Security Center's report generation functionality.	22d ago
CVE-2026-64879	9.9	critical	security center	A filename supplied during file upload is not properly sanitized before being used in system command execution, al	46d ago
CVE-2026-15265	9.1	critical	nessus agent	A path traversal vulnerability in Tenable Agent 11.2.0 and 11.1.3 and lower allows a privileged attacker to write	53d ago
CVE-2026-64881	8.8	high	security center	The audit file upload handler does not sanitize filenames, allowing shell metacharacters to flow into system comma	46d ago
CVE-2026-19635	8.8	high	security center	A local privilege escalation vulnerability exists in Security Center.	22d ago
CVE-2026-19679	8.8	high	security center	An input validation vulnerability exists in Security Center's file upload handling, where insufficient sanitizatio	22d ago
CVE-2026-64877	8.4	high	security center	An authenticated non-admin user can exploit a SQL injection flaw in the ticketing REST API to access sensitive dat	46d ago
CVE-2026-19629	8.1	high	security center	A privilege escalation vulnerability exists in Tenable Security Center that allows a user with "Security Manager"	22d ago
CVE-2026-47356	7.5	high	terrascan	Terrascan v1.18.3 and prior are vulnerable to Server-Side Request Forgery (SSRF) via the webhook_url parameter in	109d ago
CVE-2026-13007	7.5	high	identity exposure	Tenable Identity Exposure contains multiple unauthenticated API endpoints under /w/api/* that expose sensitive app	74d ago
CVE-2026-47358	7.5	high	terrascan	Terrascan v1.18.3 and prior are vulnerable to Server-Side Request Forgery (SSRF) via external URL resolution in up	109d ago
CVE-2026-47357	7.5	high	terrascan	Terrascan v1.18.3 and prior are vulnerable to Server-Side Request Forgery (SSRF) via the remote_url parameter in t	109d ago
CVE-2026-19628	7.2	high	security center	A command injection vulnerability exists in Tenable Security Center.	22d ago
CVE-2026-64880	7.1	high	security center	Unsanitized user-supplied input in report filtering parameters is concatenated directly into SQL queries without p	46d ago
CVE-2026-19680	7.1	high	security center	A SQL injection vulnerability exists in Security Center that could allow an attacker to access unauthorized data f	22d ago

Filter the full tracker by Tenable →

Our coverage of Tenable

ransomwareAug 17, 2026critical

Detecting cloud ransomware in Azure with Tenable One’s cloud detection and response capabilities

Learn how Tenable One Cloud Exposure helps you unmask the sophisticated tactics of cybercrime group Storm-0501, which carries out Azure-based cloud ransomware campaigns. Tenable One Cloud Exposure uses AI-powered threat stories to expose Storm-0501 TTPs, backed by precision-engineered threat detection alerts. Key takeaways Storm-0501 demonstrates that cloud-first ransomware groups have shifted fro