Browse all 80 CVE security advisories affecting Tenable. AI-powered Chinese analysis, POCs, and references for each vulnerability.
Tenable operates primarily as a cybersecurity platform specializing in continuous vulnerability management and exposure assessment for enterprise environments. Its core utility lies in scanning networks and cloud infrastructure to identify misconfigurations and unpatched software, enabling organizations to prioritize remediation efforts effectively. Historically, vulnerabilities within the Tenable ecosystem have predominantly involved remote code execution (RCE) and cross-site scripting (XSS), often stemming from web interface components or API endpoints. These flaws typically allowed attackers to bypass authentication or execute arbitrary commands on affected systems. While the company has maintained a generally robust security posture, past incidents have highlighted risks associated with third-party dependencies and configuration errors in its cloud-based services. The current record of 73 CVEs reflects an ongoing effort to address legacy code issues and secure expanding product suites. Users are advised to maintain strict access controls and apply patches promptly to mitigate potential exploitation vectors.
| CVE ID | Title | CVSS | Severity | Published |
|---|---|---|---|---|
| CVE-2026-2698 | Improper Access Control — Security Center CWE-639 | 6.5 | Medium | 2026-02-23 |
| CVE-2026-2697 | Indirect Object Reference (IDOR) in Security Center — Security Center CWE-639 | 6.3 | Medium | 2026-02-23 |
| CVE-2026-2630 | [R1] Stand-alone Security Patches Available for Tenable Security Center versions 6.5.1, 6.6.0 and 6.7.2: SC-202602.1 + SC-202602.2 — Security Center CWE-78 | 8.8 | High | 2026-02-17 |
| CVE-2025-36636 | Improper Access Control — Security Center | 4.3 | Medium | 2025-10-08 |
| CVE-2024-12174 | Tenable Security Center 安全漏洞 — Security Center CWE-295 | 2.7 | Low | 2024-12-09 |
| CVE-2024-5759 | Improper privilege management — Security Center CWE-269 | 5.4 | Medium | 2024-06-12 |
| CVE-2024-1891 | Stored Cross Site Scripting — Security Center CWE-79 | 3.5 | Low | 2024-06-12 |
| CVE-2024-1471 | HTML Injection Vulnerability — Security Center CWE-20 | 5.9 | Medium | 2024-02-14 |
| CVE-2024-1367 | Command Injection Vulnerability in Tenable Security Center — Security Center CWE-78 | 7.2 | High | 2024-02-14 |
This page lists every published CVE security advisory associated with Tenable. Each entry links to a detailed page with CVSS scoring, CWE classification, affected products and references. AI-generated Chinese analysis is provided for fast triage.