Tenable vulnerabilities
81 published CVEs name Tenable among the affected products.
- Published CVEs
- 81
- Last 12 months
- 12
- Critical
- 5
- Known exploited
- 0
Critical 5High 36Medium 33Low 7Not scored 0
CVEs per yearBy the year they were published
- 20173
- 201814
- 201913
- 20201
- 20211
- 202310
- 202415
- 202611
- 202613
Newest CVEs
- CVE-2026-15265
Tenable Agent Path Traversal Leading to Remote Code Execution
tenable · tenable_agent
Critical9.3 - CVE-2026-57588
SQL Injection in Nessus via Malicious Scan Result File Import
tenable · Nessus
Low1.6 - CVE-2026-57587
SQL Injection in Nessus via Reverse DNS Lookup
tenable · Nessus
Low2.1 - CVE-2026-13007
Insecure Public Caching on REST API Endpoints in Tenable Identity Exposure
tenable · Tenable Identity Exposure
High8.5 - CVE-2026-47358
Terrascan v1.18.3 and prior are vulnerable to Server-Side Request Forgery (SSRF) via external URL resolution in uploaded IaC templates when running in server…
tenable · Terrascan
Critical9.3 - CVE-2026-47357
Terrascan v1.18.3 and prior are vulnerable to Server-Side Request Forgery (SSRF) via the remote_url parameter in the remote directory scan endpoint (POST…
tenable · Terrascan
Critical9.3 - CVE-2026-47356
Terrascan v1.18.3 and prior are vulnerable to Server-Side Request Forgery (SSRF) via the webhook_url parameter in the file scan endpoint (POST…
tenable · Terrascan
High8.7 - CVE-2026-2698
Improper Access Control
Tenable · Security Center
Medium5.7 - CVE-2026-2697
Indirect Object Reference (IDOR) in Security Center
Tenable · Security Center
Low2.1 - CVE-2026-2630
[R1] Stand-alone Security Patches Available for Tenable Security Center versions 6.5.1, 6.6.0 and 6.7.2: SC-202602.1 + SC-202602.2
Tenable · Security Center
High7.4
Products with the most CVEs
Most common weaknesses
- CWE-79 Cross-site scripting (XSS)13
- CWE-269 Improper privilege management8
- CWE-78 OS command injection7
- CWE-276 Incorrect default permissions5
- CWE-787 Out-of-bounds write4
- CWE-89 SQL injection4
- CWE-20 Improper input validation3
- CWE-200 Exposure of sensitive information3
- CWE-22 Path traversal3
- CWE-284 Improper access control3