TE
Vendor
Tenable
215
CVEs
3
On KEV
0
New 30D
Products
TE9.8
Tenable.sc
Tenable
46 CVEs2 on KEV0 new
LC9.8
Log Correlation Engine
Tenable
8 CVEs1 on KEV0 new
NE9.8
Nessus
tenable
68 CVEs0 on KEV0 new
SC9.9
Security Center
Tenable
32 CVEs0 on KEV0 new
NN9.8
Nessus Network Monitor
Tenable
14 CVEs0 on KEV0 new
NA9.1
Nessus Agent
Tenable
13 CVEs0 on KEV0 new
AL9.8
Alcatel Lucent I-240W-Q GPON ONT
Tenable
6 CVEs0 on KEV0 new
AP9.8
Appliance
Tenable
4 CVEs0 on KEV0 new
IE7.5
Identity Exposure
Tenable
3 CVEs0 on KEV0 new
LS6.1
LabKey Server Community Edition
Tenable
3 CVEs0 on KEV0 new
TE8.6
Terrascan
tenable
3 CVEs0 on KEV0 new
SE8.8
SecurityCenter
Tenable
2 CVEs0 on KEV0 new
TE8.8
Tenable.io
Tenable
2 CVEs0 on KEV0 new
WU–
Web UI
Tenable
2 CVEs0 on KEV0 new
JC8.6
Jira Cloud
Tenable
1 CVEs0 on KEV0 new
MR7.5
MikroTik RouterOS
Tenable
1 CVEs0 on KEV0 new
NA5.9
Nessus Amazon Machine Image
Tenable
1 CVEs0 on KEV0 new
OT4.3
Operational Technology Exposure
Tenable
1 CVEs0 on KEV0 new
PF8.8
Plugin Feed
Tenable
1 CVEs0 on KEV0 new
PL–
Plugin-set
Tenable
1 CVEs0 on KEV0 new
TE9.1
tenable_agent
tenable
1 CVEs0 on KEV0 new
TI7.5
Tenable Identity Exposure
tenable
1 CVEs0 on KEV0 new
TN5.4
Tenable Nessus
Tenable
1 CVEs0 on KEV0 new
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-19682 | SC Security Center Tenable | 9.9 | Aug 14 | Command Injection |
| CVE-2026-19681 | SC Security Center Tenable | 9.9 | Aug 14 | Command Injection |
| CVE-2026-19680 | SC Security Center Tenable | 7.1 | Aug 14 | SQL Injection |
| CVE-2026-19679 | SC Security Center Tenable | 8.8 | Aug 14 | Improper Input Validation |
| CVE-2026-19639 | SC Security Center Tenable | 4.3 | Aug 14 | Improper Access Control |
| CVE-2026-19636 | SC Security Center Tenable | 5.3 | Aug 14 | Insuffucient Protections Lead to Brute Force |
| CVE-2026-19635 | SC Security Center Tenable | 8.8 | Aug 14 | Local Privilege Escalation |
| CVE-2026-19631 | SC Security Center Tenable | 4.9 | Aug 14 | SQL Injection |
| CVE-2026-19629 | SC Security Center Tenable | 8.1 | Aug 14 | Privilege Escalation |
| CVE-2026-19628 | SC Security Center Tenable | 7.2 | Aug 14 | Remote Code Execution |
| CVE-2026-19626 | SC Security Center Tenable | 9.9 | Aug 14 | Remote Code Execution |
| CVE-2026-64881 | SC Security Center Tenable | 8.8 | Jul 21 | Command Injection |
| CVE-2026-64880 | SC Security Center Tenable | 7.1 | Jul 21 | Blind SQL Injection |
| CVE-2026-64879 | SC Security Center Tenable | 9.9 | Jul 21 | Command Injection |
| CVE-2026-64878 | SC Security Center Tenable | 9.9 | Jul 21 | Command Injection |
| CVE-2026-64877 | SC Security Center Tenable | 8.4 | Jul 21 | An authenticated non-admin user can exploit a SQL injection flaw in the ticketing REST API to access sensitive data stored in the appliance database |
| CVE-2026-15265 | TE tenable_agent tenable | 9.1 | Jul 14 | Tenable Agent Path Traversal Leading to Remote Code Execution |
| CVE-2026-57588 | NE Nessus tenable | 3.3 | Jun 25 | SQL Injection in Nessus via Malicious Scan Result File Import |
| CVE-2026-57587 | NE Nessus tenable | 5.3 | Jun 25 | SQL Injection in Nessus via Reverse DNS Lookup |
| CVE-2026-13007 | TI Tenable Identity Exposure tenable | 7.5 | Jun 23 | Insecure Public Caching on REST API Endpoints in Tenable Identity Exposure |
| CVE-2026-47358 | TE Terrascan tenable | 8.6 | May 19 | Terrascan v1.18.3 and prior are vulnerable to Server-Side Request Forgery (SSRF) via external URL resolution in uploaded IaC templates when running in server mode |
| CVE-2026-47357 | TE Terrascan tenable | 8.6 | May 19 | Terrascan v1.18.3 and prior are vulnerable to Server-Side Request Forgery (SSRF) via the remote_url parameter in the remote directory scan endpoint (POST… |
| CVE-2026-47356 | TE Terrascan tenable | 8.6 | May 19 | Terrascan v1.18.3 and prior are vulnerable to Server-Side Request Forgery (SSRF) via the webhook_url parameter in the file scan endpoint (POST… |
| CVE-2026-33694 | NA Nessus Agent Tenable | 7.8 | Apr 23 | Junction File Manipulation |
| CVE-2026-4433 | OT Operational Technology Exposure Tenable | 4.3 | Mar 24 | An SSH misconfigurations exists in Tenable OT that led to the potential exfiltration of socket, port, and service information via the ostunnel user and GatewayPorts |
| CVE-2026-2698 | SC Security Center Tenable | 6.5 | Feb 23 | An improper access control vulnerability exists where an authenticated user could access areas outside of their authorized scope |
| CVE-2026-2697 | SC Security Center Tenable | 8.8 | Feb 23 | An Indirect Object Reference (IDOR) in Security Center allows an authenticated remote attacker to escalate privileges via the 'owner' parameter |
| CVE-2026-2026 | NA Nessus Agent Tenable | 6.1 | Feb 13 | A vulnerability has been identified where weak file permissions in the Nessus Agent directory on Windows hosts could allow unauthorized access, potentially permitting Denial of… |
| CVE-2025-36630 | NE Nessus Tenable | 7.1 | Jul 2 | In Tenable Nessus versions prior to 10.8.5 on a Windows host, it was found that a non-administrative user could overwrite arbitrary local system files with log content at SYSTEM… |
| CVE-2025-36632 | NA Nessus Agent Tenable | 7.8 | Jun 16 | In Tenable Agent versions prior to 10.8.5 on a Windows host, it was found that a non-administrative user could execute code with SYSTEM privilege |
| CVE-2025-36633 | NA Nessus Agent Tenable | 7.8 | Jun 13 | In Tenable Agent versions prior to 10.8.5 on a Windows host, it was found that a non-administrative user could arbitrarily delete local system files with SYSTEM privilege,… |
| CVE-2025-36631 | NA Nessus Agent Tenable | 7.8 | Jun 13 | In Tenable Agent versions prior to 10.8.5 on a Windows host, it was found that a non-administrative user could overwrite arbitrary local system files with log content at SYSTEM… |
| CVE-2025-24917 | NN Nessus Network Monitor Tenable | 7.8 | May 23 | In Tenable Network Monitor versions prior to 6.5.1 on a Windows host, it was found that a non-administrative user could stage files in a local directory to run arbitrary code with… |
| CVE-2025-24916 | NN Nessus Network Monitor Tenable | 7.8 | May 23 | When installing Tenable Network Monitor to a non-default location on a Windows host, Tenable Network Monitor versions prior to 6.5.1 did not enforce secure permissions for… |
| CVE-2024-9158 | NN Nessus Network Monitor Tenable | 4.6 | Sep 30 | A stored cross site scripting vulnerability exists in Nessus Network Monitor where an authenticated, privileged local attacker could inject arbitrary code into the NNM UI via the… |
| CVE-2024-3232 | IE Identity Exposure Tenable | 6.8 | Jul 16 | A formula injection vulnerability exists in Tenable Identity Exposure where an authenticated remote attacker with administrative privileges could manipulate application form… |
| CVE-2024-5759 | SC Security Center Tenable | 6.3 | Jun 12 | An improper privilege management vulnerability exists in Tenable Security Center where an authenticated, remote attacker could view unauthorized objects and launch scans without… |
| CVE-2024-1891 | SC Security Center Tenable | 5.4 | Jun 12 | A stored cross site scripting vulnerability exists in Tenable Security Center where an authenticated, remote attacker could inject HTML code into a web application scan result… |
| CVE-2024-1683 | IE Identity Exposure Tenable | 7.3 | Feb 23 | A DLL injection vulnerability exists where an authenticated, low-privileged local attacker could modify application files on the TIE Secure Relay host, which could allow for… |
| CVE-2024-1471 | SC Security Center Tenable | 4.8 | Feb 14 | An HTML injection vulnerability exists where an authenticated, remote attacker with administrator privileges on the Security Center application could modify Repository parameters,… |
| CVE-2024-1367 | SC Security Center Tenable | 7.2 | Feb 14 | A command injection vulnerability exists where an authenticated, remote attacker with administrator privileges on the Security Center application could modify Logging parameters,… |
| CVE-2024-0971 | NE Nessus Tenable | 6.5 | Feb 7 | A SQL injection vulnerability exists where an authenticated, low-privileged remote attacker could potentially alter scan DB content |
| CVE-2024-0955 | NE Nessus Tenable | 4.8 | Feb 7 | A stored XSS vulnerability exists where an authenticated, remote attacker with administrator privileges on the Nessus application could alter Nessus proxy settings, which could… |
| CVE-2023-6178 | NE Nessus Tenable | 6.5 | Nov 20 | An arbitrary file write vulnerability exists where an authenticated attacker with privileges on the managing application could alter Nessus Rules variables to overwrite arbitrary… |
| CVE-2023-6062 | NE Nessus Tenable | 6.5 | Nov 20 | An arbitrary file write vulnerability exists where an authenticated, remote attacker with administrator privileges on the Nessus application could alter Nessus Rules variables to… |
| CVE-2023-5847 | NA Nessus Agent Tenable | 7.3 | Nov 1 | Under certain conditions, a low privileged attacker could load a specially crafted file during installation or upgrade to escalate privileges on Windows and Linux hosts |
| CVE-2023-5624 | NN Nessus Network Monitor Tenable | 7.2 | Oct 26 | Under certain conditions, Nessus Network Monitor was found to not properly enforce input validation |
| CVE-2023-5623 | NN Nessus Network Monitor Tenable | 7.8 | Oct 26 | NNM failed to properly set ACLs on its installation directory, which could allow a low privileged user to run arbitrary code with SYSTEM privileges where NNM is installed to a… |
| CVE-2023-5622 | NN Nessus Network Monitor Tenable | 8.8 | Oct 26 | Under certain conditions, Nessus Network Monitor could allow a low privileged user to escalate privileges to NT AUTHORITY\SYSTEM on Windows hosts by replacing a specially crafted… |
| CVE-2023-3253 | NE Nessus Tenable | 4.3 | Aug 29 | An improper authorization vulnerability exists where an authenticated, low privileged remote attacker could view a list of all the users available in the application |
| CVE-2023-3252 | NE Nessus Tenable | 6.5 | Aug 29 | An arbitrary file write vulnerability exists where an authenticated, remote attacker with administrator privileges could alter logging variables to overwrite arbitrary files on… |
| CVE-2023-3251 | NE Nessus Tenable | 4.9 | Aug 29 | A pass-back vulnerability exists where an authenticated, remote attacker with administrator privileges could uncover stored SMTP credentials within the Nessus application.This… |
| CVE-2023-2005 | TE Tenable.io Tenable | 8.8 | Jun 26 | Vulnerability in Tenable Tenable.Io, Tenable Nessus, Tenable Security Center.This issue affects Tenable.Io: before Plugin Feed ID #202306261202 ; Nessus: before Plugin Feed ID… |
| CVE-2022-4313 | NE Nessus Tenable | 8.8 | Mar 15 | A vulnerability was reported where through modifying the scan variables, an authenticated user in Tenable products, that has Scan Policy Configuration roles, could manipulate… |
| CVE-2023-0524 | TE Tenable.sc Tenable | 8.8 | Feb 1 | As part of our Security Development Lifecycle, a potential privilege escalation issue was identified internally |
| CVE-2023-24495 | TE Tenable.sc Tenable | 6.5 | Jan 26 | A Server Side Request Forgery (SSRF) vulnerability exists in Tenable.sc due to improper validation of session & user-accessible input data |
| CVE-2023-24494 | TE Tenable.sc Tenable | 5.4 | Jan 26 | A stored cross-site scripting (XSS) vulnerability exists in Tenable.sc due to improper validation of user-supplied input before returning it to users |
| CVE-2023-24493 | TE Tenable.sc Tenable | 5.7 | Jan 26 | A formula injection vulnerability exists in Tenable.sc due to improper validation of user-supplied input before returning it to users |
| CVE-2023-0476 | TE Tenable.sc Tenable | 6.5 | Jan 26 | A LDAP injection vulnerability exists in Tenable.sc due to improper validation of user-supplied input before returning it to users |
| CVE-2023-0101 | NE Nessus Tenable | 8.8 | Jan 20 | A privilege escalation vulnerability was identified in Nessus versions 8.10.1 through 8.15.8 and 10.0.0 through 10.4.1 |
