Login Request a demo
TE
Product
Terrascan
by tenable · last CVE May 19, 2026
3
CVEs
0
On KEV
8.6
Max CVSS
0
New 30D
Vulnerabilities3In the news0Timeline
Severity mix
Critical 0High 3Medium 0Low 0
Severity
All severities3Critical0High3Medium0Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Terrascan to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-47358
8.6
0%
May 19
Terrascan v1.18.3 and prior are vulnerable to Server-Side Request Forgery (SSRF) via external URL resolution in uploaded IaC templates when running in server mode
Affected: through 1.18.3
CVE-2026-47357
8.6
0%
May 19
Terrascan v1.18.3 and prior are vulnerable to Server-Side Request Forgery (SSRF) via the remote_url parameter in the remote directory scan endpoint (POST…
Affected: through 1.18.3
CVE-2026-47356
8.6
0%
May 19
Terrascan v1.18.3 and prior are vulnerable to Server-Side Request Forgery (SSRF) via the webhook_url parameter in the file scan endpoint (POST…
Affected: through 1.18.3
Showing 3