PT-2026-72079

Name of the Vulnerable Software and Affected Versions Security Center affected versions not specified Description An authenticated command injection issue exists during file upload processing. An attacker with valid credentials can upload a specially crafted file to execute arbitrary commands on...

PT-2026-72059

A local privilege escalation vulnerability exists in Security Center. An attacker with write access to a specific configuration file could achieve arbitrary code execution with elevated privileges, without requiring further user or victim interaction...

PT-2026-72057

A privilege escalation vulnerability exists in Tenable Security Center that allows a user with "Security Manager" role and "manage user" permission on a single group to modify users belonging to other groups. This bypasses the intended access control restrictions and enables unauthorized...

PT-2026-72080

A command injection vulnerability exists in Security Center where a remote, unauthenticated attacker could exploit this issue to execute arbitrary commands on the underlying operating system with the privileges of the service account...

[R1] Security Center Version 6.9.0 Fixes Multiple Vulnerabilities

R1 Security Center Version 6.9.0 Fixes Multiple Vulnerabilities Arnie Cabral Thu, 08/13/2026 - 10:35 Security Center leverages third-party software to help provide underlying functionality. Several of the third-party components curl, underscoreJS were found to contain vulnerabilities, and updated...

Tenable Security Center SCAP Audit File Command Injection

Tenable Security Center prior to 6.9.0 allows an authenticated user to achieve command execution as the web service account tns via the SCAP audit file upload flow. Filesystem::saveTmp builds staged upload filenames from the raw client-supplied context form parameter tempnam prefix, which is not...

[R1] Stand-alone Security Patch Available for SC Versions 6.6.4, 6.7.5 and 6.8.0 on Tenable Enclave Security: SC202607.2

R1 Stand-alone Security Patch Available for SC Versions 6.6.4, 6.7.5 and 6.8.0 on Tenable Enclave Security: SC202607.2 Jason Schavel Fri, 07/31/2026 - 13:00 Security Center on Tenable Enclave Security leverages third-party software to help provide underlying functionality. Several of the...

Tenable Security Center Multiple Vulnerabilities (TNS-2026-19)

According to its self-reported version, the Tenable Security Center running on the remote host is between 6.7.0 and 6.8.0. It is, therefore, affected by multiple vulnerabilities as referenced in the TNS-2026-19 advisory. - Redis is an in-memory data structure store. In redis-server from 7.2.0 unt...

[R3] Stand-alone Security Patch Available for Tenable Security Center Versions 6.6.0, 6.7.2 and 6.8.0: SC202607.1

R3 Stand-alone Security Patch Available for Tenable Security Center Versions 6.6.0, 6.7.2 and 6.8.0: SC202607.1 Arnie Cabral Mon, 07/20/2026 - 13:01 Security Center leverages third-party software to help provide underlying functionality. Several of the third-party components apache, OpenSSL,...

CVE-2026-49807

creationtimestamp| type| source ---|---|--- 2026-07-14 19:01:54+00:00| seen| https://advisories.ncsc.nl/advisory?id=NCSC-2026-0231 2026-07-14 22:03:47+00:00| seen| https://www.thezdi.com/blog/2026/7/14/the-july-2026-security-update-review 2026-07-15 01:01:34+00:00| seen|...

CVE-2026-50498

creationtimestamp| type| source ---|---|--- 2026-07-14 19:01:54+00:00| seen| https://advisories.ncsc.nl/advisory?id=NCSC-2026-0231 2026-07-14 22:04:55+00:00| seen| https://www.thezdi.com/blog/2026/7/14/the-july-2026-security-update-review 2026-07-15 01:01:34+00:00| seen|...

CVE-2026-54132

creationtimestamp| type| source ---|---|--- 2026-07-14 19:01:51+00:00| seen| https://advisories.ncsc.nl/advisory?id=NCSC-2026-0231 2026-07-14 22:03:59+00:00| seen| https://www.thezdi.com/blog/2026/7/14/the-july-2026-security-update-review 2026-07-15 01:01:30+00:00| seen|...

CVE-2026-58614

creationtimestamp| type| source ---|---|--- 2026-07-14 19:01:51+00:00| seen| https://advisories.ncsc.nl/advisory?id=NCSC-2026-0231 2026-07-14 22:04:06+00:00| seen| https://www.thezdi.com/blog/2026/7/14/the-july-2026-security-update-review 2026-07-15 01:01:30+00:00| seen|...

CVE-2026-50392

creationtimestamp| type| source ---|---|--- 2026-07-14 19:01:46+00:00| seen| https://advisories.ncsc.nl/advisory?id=NCSC-2026-0231 2026-07-14 22:02:23+00:00| seen| https://www.thezdi.com/blog/2026/7/14/the-july-2026-security-update-review 2026-07-15 01:01:28+00:00| seen|...

CVE-2026-50460

creationtimestamp| type| source ---|---|--- 2026-07-14 19:01:45+00:00| seen| https://advisories.ncsc.nl/advisory?id=NCSC-2026-0231 2026-07-14 22:04:43+00:00| seen| https://www.thezdi.com/blog/2026/7/14/the-july-2026-security-update-review 2026-07-15 01:01:27+00:00| seen|...

CVE-2026-50358

creationtimestamp| type| source ---|---|--- 2026-07-14 19:01:42+00:00| seen| https://advisories.ncsc.nl/advisory?id=NCSC-2026-0231 2026-07-14 22:04:10+00:00| seen| https://www.thezdi.com/blog/2026/7/14/the-july-2026-security-update-review 2026-07-15 01:01:24+00:00| seen|...

CVE-2026-58531

creationtimestamp| type| source ---|---|--- 2026-07-14 19:01:42+00:00| seen| https://advisories.ncsc.nl/advisory?id=NCSC-2026-0231 2026-07-14 22:04:48+00:00| seen| https://www.thezdi.com/blog/2026/7/14/the-july-2026-security-update-review 2026-07-15 01:01:24+00:00| seen|...

CVE-2026-49804

creationtimestamp| type| source ---|---|--- 2026-07-14 19:01:40+00:00| seen| https://advisories.ncsc.nl/advisory?id=NCSC-2026-0231 2026-07-14 22:04:59+00:00| seen| https://www.thezdi.com/blog/2026/7/14/the-july-2026-security-update-review 2026-07-15 01:01:21+00:00| seen|...

CVE-2026-55014

creationtimestamp| type| source ---|---|--- 2026-07-14 19:01:40+00:00| seen| https://advisories.ncsc.nl/advisory?id=NCSC-2026-0231 2026-07-14 22:04:35+00:00| seen| https://www.thezdi.com/blog/2026/7/14/the-july-2026-security-update-review 2026-07-15 01:01:21+00:00| seen|...

CVE-2026-50674

creationtimestamp| type| source ---|---|--- 2026-07-14 19:01:39+00:00| seen| https://advisories.ncsc.nl/advisory?id=NCSC-2026-0231 2026-07-14 22:04:58+00:00| seen| https://www.thezdi.com/blog/2026/7/14/the-july-2026-security-update-review 2026-07-15 01:01:21+00:00| seen|...