Log in Start free

Tenable, Inc.

Products

ProductCVEsExploitedLatest
Security Center16–Aug 14, 2026
Plugin Feed1–Oct 29, 2026
Sensor Proxy1–Aug 3, 2026
Tenable Identity Exposure (SaaS)1–Oct 8, 2026
Tenable Nessus1–Oct 24, 2022
Tenable Nessus, Tenable Nessus Agent1–Apr 23, 2026
Nessus1–Oct 14, 2026
Tenable Operation Technology1–Mar 24, 2026

Exploited and recent CVEs

  • CVE-2026-119317 Medium 6.5 Incorrect Authorization 0.2%
  • CVE-2026-103946 High 8.3 SQL Injection 0.4%
  • CVE-2026-106126 Critical 9.9 Command Injection 2.2%
  • CVE-2026-19682 Critical 9.9 Command Injection 2.0%
  • CVE-2026-19681 Critical 9.9 Command Injection 4.2%
  • CVE-2026-19680 High 7.1 SQL Injection 0.3%
  • CVE-2026-19679 High 8.8 Improper Input Validation 1.6%
  • CVE-2026-19639 Medium 4.3 Improper Access Control 0.3%
  • CVE-2026-19636 Medium 5.3 Insuffucient Protections Lead to Brute Force 0.3%
  • CVE-2026-19635 High 8.8 Local Privilege Escalation 0.2%
  • CVE-2026-19631 Medium 4.9 SQL Injection 0.4%
  • CVE-2026-19629 High 8.1 Privilege Escalation 0.4%
  • CVE-2026-19628 High 7.2 Remote Code Execution 2.1%
  • CVE-2026-19626 Critical 9.9 Remote Code Execution 1.7%
  • CVE-2026-18667 Critical 9.6 Sensor Proxy Version 1.4.2 Fixes One Vulnerability 0.7%
  • CVE-2026-64881 High 8.8 Command Injection 2.2%
  • CVE-2026-64880 High 7.1 Blind SQL Injection 0.3%
  • CVE-2026-64879 Critical 9.9 Command Injection 2.3%
  • CVE-2026-64878 Critical 9.9 Command Injection 0.8%
  • CVE-2026-64877 High 8.4 An authenticated non-admin user can exploit a SQL injection flaw in the ticketing REST API to access sensitive data stored in the appliance database. 0.3%
  • CVE-2026-33694 High 7.4 Junction File Manipulation 0.2%
  • CVE-2026-4433 Low 1.9 An SSH misconfigurations exists in Tenable OT that led to the potential exfiltration of socket, port, and service information via the ostunnel user and GatewayPorts. This could be used to potentially 0.2%
  • CVE-2022-33757 Medium 6.5 An authenticated attacker could read Nessus Debug Log file attachments from the web UI without having the correct privileges to do so. This may lead to the disclosure of information on the scan target 1.0%