Tenable

18 CVEs published in the last four months and 1 stories. Exploited flaws first.

Critical6

High12

Medium0

Exploited (KEV)0

All recent CVEs

CVE	CVSS	Severity	Product	Summary	Published
CVE-2026-64878	9.9	critical	security center	Unvalidated input in asset filter parameters allows shell metacharacters to escape command argument handling, resu	93d ago
CVE-2026-19682	9.9	critical	security center	A command injection vulnerability exists in Security Center where a remote, unauthenticated attacker could exploit	69d ago
CVE-2026-19681	9.9	critical	security center	An authenticated command injection vulnerability exists in Security Center related to file upload processing.	69d ago
CVE-2026-19626	9.9	critical	security center	A remote code execution vulnerability exists in Tenable Security Center's report generation functionality.	69d ago
CVE-2026-64879	9.9	critical	security center	A filename supplied during file upload is not properly sanitized before being used in system command execution, al	93d ago
CVE-2026-15265	9.1	critical	nessus agent	A path traversal vulnerability in Tenable Agent 11.2.0 and 11.1.3 and lower allows a privileged attacker to write	100d ago
CVE-2026-64881	8.8	high	security center	The audit file upload handler does not sanitize filenames, allowing shell metacharacters to flow into system comma	93d ago
CVE-2026-19635	8.8	high	security center	A local privilege escalation vulnerability exists in Security Center.	69d ago
CVE-2026-19679	8.8	high	security center	An input validation vulnerability exists in Security Center's file upload handling, where insufficient sanitizatio	69d ago
CVE-2026-64877	8.4	high	security center	An authenticated non-admin user can exploit a SQL injection flaw in the ticketing REST API to access sensitive dat	93d ago
CVE-2026-19629	8.1	high	security center	A privilege escalation vulnerability exists in Tenable Security Center that allows a user with "Security Manager"	69d ago
CVE-2026-47356	7.5	high	terrascan	Terrascan v1.18.3 and prior are vulnerable to Server-Side Request Forgery (SSRF) via the webhook_url parameter in	156d ago
CVE-2026-13007	7.5	high	identity exposure	Tenable Identity Exposure contains multiple unauthenticated API endpoints under /w/api/* that expose sensitive app	121d ago
CVE-2026-47358	7.5	high	terrascan	Terrascan v1.18.3 and prior are vulnerable to Server-Side Request Forgery (SSRF) via external URL resolution in up	156d ago
CVE-2026-47357	7.5	high	terrascan	Terrascan v1.18.3 and prior are vulnerable to Server-Side Request Forgery (SSRF) via the remote_url parameter in t	156d ago
CVE-2026-19628	7.2	high	security center	A command injection vulnerability exists in Tenable Security Center.	69d ago
CVE-2026-64880	7.1	high	security center	Unsanitized user-supplied input in report filtering parameters is concatenated directly into SQL queries without p	93d ago
CVE-2026-19680	7.1	high	security center	A SQL injection vulnerability exists in Security Center that could allow an attacker to access unauthorized data f	69d ago

Filter the full tracker by Tenable →

Our coverage of Tenable

ransomwareAug 17, 2026critical

Detecting cloud ransomware in Azure with Tenable One’s cloud detection and response capabilities

A financially motivated cybercrime group, identified as Storm-0501, has evolved its ransomware tactics to target cloud environments, specifically Microsoft Azure. This group, which Microsoft has been tracking since 2024, is noted for its ability to bridge on-premises Active Directory systems with cloud-native Microsoft Entra ID and Azure environments.