PT-2026-83438

In MITRE SAF Heimdall 2.11.6 through 2.13.x before 2.14.0, an SSRF issue allows remote attackers to access internal network resources via the Tenable proxy endpoint. This occurs in apps/backend/src/tenable/tenable.controller.ts...

CVE-2026-82477: Server-Side Request Forgery (SSRF)

In MITRE SAF Heimdall 2.11.6 through 2.13.x before 2.14.0, an SSRF issue allows remote attackers to access internal network resources via the Tenable proxy endpoint. This occurs in apps/backend/src/tenable/tenable.controller.ts...

[R1] Stand-alone Security Patch Available for Tenable Enclave Security 1.7.0 and 1.8.0: SC-202608.1

R1 Stand-alone Security Patch Available for Tenable Enclave Security 1.7.0 and 1.8.0: SC-202608.1 Arnie Cabral Fri, 08/28/2026 - 12:01 Several vulnerabilities have been identified, reported to Tenable and resolved. Please see the full list of resolved issues below. Component| CVE ID | Severity |...

[R1] Stand-alone Security Patch Available for Tenable Security Center Versions 6.6.0, 6.7.2, 6.8.0: SC-202608.1

R1 Stand-alone Security Patch Available for Tenable Security Center Versions 6.6.0, 6.7.2, 6.8.0: SC-202608.1 Arnie Cabral Thu, 08/27/2026 - 13:05 Several vulnerabilities have been identified, reported to Tenable and resolved. Please see the full list of resolved issues below. Component| CVE ID |...

[R1] Tenable Enclave Security 1.9.0 Fixes Multiple Vulnerabilities

R1 Tenable Enclave Security 1.9.0 Fixes Multiple Vulnerabilities Arnie Cabral Thu, 08/27/2026 - 12:25 Tenable Enclave Security leverages third-party software to help provide underlying functionality. Several of the third-party components Node.Js, Go were found to contain vulnerabilities, and...

Tenable Security Center SCAP Audit File Command Injection

This is a Metasploit module that demonstrates how Tenable Security Center versions prior to 6.9.0 allow an authenticated user to achieve command execution as the web service account tns via the SCAP audit file upload flow. This module requires Metasploit: https://metasploit.com/download Current...

Tenable Security Center Report Charting Remote Code Execution

This Metasploit module demonstrates how Tenable Security Center versions prior to 6.9.0 allow an authenticated, non-administrative user to achieve code execution as the web service account tns through report generation. This module requires Metasploit: https://metasploit.com/download Current...

FreeBSD : MariaDB -- Multiple vulnerabilities (f68670ea-a05d-11f1-8144-8447094a420f)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the f68670ea-a05d-11f1-8144-8447094a420f advisory. The MariaDB project reports: Details in links Tenable has extracted the preceding description...

Exploit for Eval Injection in Tenable Security_Center

C...

Exploit for OS Command Injection in Tenable Security_Center

C...

Tenable Security Center < 6.9.0 Multiple Vulnerabilities (TNS-2026-22)

According to its self-reported version, the Tenable Security Center running on the remote host is prior to 6.9.0. It is, therefore, affected by multiple vulnerabilities as referenced in the TNS-2026-22 advisory. - libcurl might in some circumstances reuse the wrong connection for SMBS transfers...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-100377)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100377 advisory. In the Linux kernel, the following vulnerability has been resolved: blk-crypto: make blkcryptoevictkey more robust If blkcryptoevictkey sees that the key is still...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: firefox (UTSA-2026-100944)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100944 advisory. Sandbox escape in the Graphics: WebRender component. This vulnerability was fixed in Firefox 148, Firefox ESR 115.33, Firefox ESR 140.8, Thunderbird 148, and...

Unity Linux 20.1070e Security Update: log4j (UTSA-2026-099531)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-099531 advisory. Improper encoding of non-finite floating-point values during MapMessage JSON serialization in Apache Log4j API produces output that is not valid JSON. This issue...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-100356)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100356 advisory. In the Linux kernel, the following vulnerability has been resolved: rose: fix dangling neighbour pointers in rosertdevicedown There are two bugs in rosertdevicedown...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: firefox (UTSA-2026-100967)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100967 advisory. Sandbox escape due to incorrect boundary conditions, integer overflow in the XPCOM component. This vulnerability was fixed in Firefox 149, Firefox ESR 115.34, Firefo...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: firefox (UTSA-2026-101482)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-101482 advisory. Incorrect boundary conditions in the Graphics: Canvas2D component. This vulnerability was fixed in Firefox 149, Firefox ESR 115.34, Firefox ESR 140.9, Thunderbird 14...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-100701)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100701 advisory. In the Linux kernel, the following vulnerability has been resolved: net: usb: catc: enable basic endpoint checking catcprobe fills three URBs with hardcoded endpoint...

Unity Linux 20.1070e Security Update: rubygem-excon (UTSA-2026-099493)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-099493 advisory. Excon is usable, fast, simple HTTP 1.1 for Ruby. Prior to 1.5.0, Excon's RedirectFollower middleware failed to strip additional sensitive headers when following...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-099932)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-099932 advisory. In the Linux kernel, the following vulnerability has been resolved: ipc/shm: serialize orphan cleanup with shmnattch updates shmdestroyorphaned walks the shm idr und...