CVE-2026-19626 Remote Code Execution

A remote code execution vulnerability exists in Tenable Security Center's report generation functionality. An authenticated, non-administrative user could exploit this issue by supplying specially crafted input that is later processed unsafely during server-side report rendering, resulting in...

CVE-2026-19628: Improper Neutralization of Special Elements used in an OS Command

A command injection vulnerability exists in Tenable Security Center. An authenticated administrator could modify application configuration values to achieve arbitrary command execution on the underlying operating system when specific backend operations are triggered...

CVE-2026-19626: Improper Neutralization of Directives in Dynamically Evaluated Code

A remote code execution vulnerability exists in Tenable Security Center's report generation functionality. An authenticated, non-administrative user could exploit this issue by supplying specially crafted input that is later processed unsafely during server-side report rendering, resulting in...

CVE-2026-19629: Incorrect Authorization

A privilege escalation vulnerability exists in Tenable Security Center that allows a user with "Security Manager" role and "manage user" permission on a single group to modify users belonging to other groups. This bypasses the intended access control restrictions and enables unauthorized...

PT-2026-72057

Name of the Vulnerable Software and Affected Versions Tenable Security Center affected versions not specified Description A privilege escalation issue allows a user assigned the Security Manager role with the manage user permission for a specific group to modify users in different groups. This fl...

PT-2026-72055

Name of the Vulnerable Software and Affected Versions Tenable Security Center affected versions not specified Description A remote code execution issue exists in the report generation functionality. An authenticated, non-administrative user can exploit this by providing specially crafted input th...

PT-2026-72056

Name of the Vulnerable Software and Affected Versions Tenable Security Center affected versions not specified Description A command injection flaw allows an authenticated administrator to execute arbitrary commands on the underlying operating system. This occurs when the administrator modifies...

Oracle Linux 10 : .NET / 8.0 (ELSA-2026-54541)

The remote Oracle Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-54541 advisory. 8.0.130-1.0.1 - Add support for Oracle Linux 8.0.130-1 - Update to .NET SDK 8.0.130 and Runtime 8.0.30 - Resolves: RHEL-235472 Tenable has extracted...

Tenable Security Center Report Charting RCE

Tenable Security Center prior to 6.9.0 allows an authenticated, non-administrative user to achieve code execution as the web service account tns through report generation. A report definition's inline style is discarded at render components rehydrate styles from the Style tables by styleID, so th...

Tenable Security Center SCAP Audit File Command Injection

Tenable Security Center prior to 6.9.0 allows an authenticated user to achieve command execution as the web service account tns via the SCAP audit file upload flow. Filesystem::saveTmp builds staged upload filenames from the raw client-supplied context form parameter tempnam prefix, which is not...

Fedora 46 : botan3 (2026-c5ca310459)

The remote Fedora 46 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-c5ca310459 advisory. Automatic update for botan3-3.12.0-1.fc46. Changelog Wed Aug 12 2026 Carlos Rodriguez-Fernandez - 3.12.0-1 - Update to 3.12.0 rhbz2483287 Tenable has extract...

Fedora 45 : libcupsfilters (2026-d0c531d75b)

The remote Fedora 45 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-d0c531d75b advisory. Automatic update for libcupsfilters-2.2.1-1.fc45. Changelog Tue Aug 11 2026 Zdenek Dohnal - 1:2.2.1-1 - fix pclmtoraster issues found in CI, 2.2.1...

Fedora 44 : python-webob (2026-7aaa63dd24)

The remote Fedora 44 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-7aaa63dd24 advisory. Update to upstream - CVE-2024-42353. Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has n...

Photon OS 5.0: Icu PHSA-2025-5.0-91-0578

An update of the icu package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2025-5.0-91-0578. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

Photon OS 5.0: Sqlite PHSA-2025-5.0-92-0624

An update of the sqlite package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2025-5.0-92-0624. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

Photon OS 5.0: Linux PHSA-2023-5.0-91-0103

An update of the linux package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2023-5.0-91-0103. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

Photon OS 5.0: Etcd PHSA-2026-5.0-91-0802

An update of the etcd package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2026-5.0-91-0802. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

Photon OS 5.0: Linux PHSA-2023-5.0-91-0096

An update of the linux package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2023-5.0-91-0096. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

Photon OS 5.0: Go PHSA-2026-5.0-92-0869

An update of the go package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2026-5.0-92-0869. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

Photon OS 5.0: Nss PHSA-2024-5.0-92-0190

An update of the nss package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2024-5.0-92-0190. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...