Log in Start free

Tenable

Products

ProductCVEsExploitedLatest
Nessus16–Jun 25, 2026
Security Center10–Feb 23, 2026
Nessus Agent7–Jan 13, 2026
Agent4–Feb 13, 2026
Tenable Identity Exposure4–Jun 23, 2026
Nessus Network Monitor4–Sep 30, 2024
Terrascan3–May 19, 2026
Network Monitor2–May 23, 2025
tenable_agent1–Jul 14, 2026
integration-jira-cloud1–Mar 10, 2021
Tenable Identity Exposure Secure Relay1–Feb 23, 2024
Tenable.io1–Jun 26, 2023
Grandstream GWN70001–Jul 17, 2020

Exploited and recent CVEs

  • CVE-2026-15265 Critical 9.1 Tenable Agent Path Traversal Leading to Remote Code Execution 0.6%
  • CVE-2026-57588 Low 3.3 SQL Injection in Nessus via Malicious Scan Result File Import 0.3%
  • CVE-2026-57587 Medium 5.3 SQL Injection in Nessus via Reverse DNS Lookup 0.4%
  • CVE-2026-13007 High 7.5 Insecure Public Caching on REST API Endpoints in Tenable Identity Exposure 0.6%
  • CVE-2026-47358 High 7.5 Terrascan v1.18.3 and prior are vulnerable to Server-Side Request Forgery (SSRF) via external URL resolution in uploaded IaC templates when running in server mode. When Terrascan parses uploaded ARM t 0.5%
  • CVE-2026-47357 High 7.5 Terrascan v1.18.3 and prior are vulnerable to Server-Side Request Forgery (SSRF) via the remote_url parameter in the remote directory scan endpoint (POST /v1/{iac}/{iacVersion}/{cloud}/remote/dir/scan 0.5%
  • CVE-2026-47356 High 7.5 Terrascan v1.18.3 and prior are vulnerable to Server-Side Request Forgery (SSRF) via the webhook_url parameter in the file scan endpoint (POST /v1/{iac}/{iacVersion}/{cloud}/local/file/scan) when runn 0.5%
  • CVE-2026-2698 Medium 6.5 Improper Access Control 0.2%
  • CVE-2026-2697 Medium 6.3 Indirect Object Reference (IDOR) in Security Center 0.2%
  • CVE-2026-2630 High 8.8 [R1] Stand-alone Security Patches Available for Tenable Security Center versions 6.5.1, 6.6.0 and 6.7.2: SC-202602.1 + SC-202602.2 1.3%
  • CVE-2026-2026 Medium 6.1 Improper Access Control Allows Denial of Service 0.1%
  • CVE-2025-36640 High 8.8 Local Privilege Escalation 0.1%
  • CVE-2025-36636 Medium 4.3 Improper Access Control 0.2%
  • CVE-2025-36630 High 8.4 Local Privilege Escalation 0.2%
  • CVE-2025-36632 High 7.8 Local Privilege Escalation 0.2%
  • CVE-2025-36631 High 8.4 Local Privilege Escalation 0.2%
  • CVE-2025-36633 High 8.8 Local Privilege Escalation 0.2%
  • CVE-2025-24917 High 7.8 Improper Access Control leads to Local Privilege Escalation 0.2%
  • CVE-2025-24916 High 7.0 Improper Access Control leads to Local Priviledge Escalation 0.2%
  • CVE-2025-36625 Medium 4.3 Log Poisoning in Nessus 0.3%
  • CVE-2025-24914 High 7.8 Local Priviledge Escalation 0.2%
  • CVE-2025-24915 High 7.8 When installing Nessus Agent to a non-default location on a Windows host, Nessus Agent versions prior to 10.8.3 did not enforce secure permissions for sub-directories.  This could allow for local priv 0.2%
  • CVE-2025-0760 Low 2.7 Stored Credential Disclosure Vulnerability 0.2%
  • CVE-2025-1091 Medium 4.3 Broken Authorization Schema 0.3%
  • CVE-2024-12174 Low 2.7 An Improper Certificate Validation vulnerability exists in Tenable Security Center where an authenticated, privileged attacker could intercept email messages sent from Security Center via a rogue SMTP 0.2%
  • CVE-2024-9158 High 8.4 XSS 0.3%
  • CVE-2024-3232 High 7.6 Formula Injection Vulnerability 0.5%
  • CVE-2024-5759 Medium 5.4 Improper privilege management 0.3%
  • CVE-2024-1891 Low 3.5 Stored Cross Site Scripting 0.3%
  • CVE-2024-3292 High 8.2 Race Condition 0.2%