Threat database

CVE-2026-103946 is an SQL injection vulnerability in Tenable, Inc.'s Nessus product that affects versions prior to 10.12.5. It allows an authenticated user to read or modify data stored by Nessus. The vulnerability has a high severity with a CVSS score of 8.3.

CVE-2026-106126 is a critical OS command injection vulnerability in the Active Directory Events Listener component of Tenable Identity Exposure (SaaS). It allows an authenticated user with low privileges to execute arbitrary commands with SYSTEM-level privileges on the Primary Domain Controller emulator (PDCe). This vulnerability affects versions from 0 up to but not including 3.126.0 and has a CVSS score of 9.9, indicating a severe risk to confidentiality, integrity, and availability.

A command injection vulnerability exists in Security Center where a remote, unauthenticated attacker could exploit this issue to execute arbitrary commands on the underlying operating system with the privileges of the service account.

An authenticated command injection vulnerability exists in Security Center related to file upload processing. An attacker could exploit this issue by uploading a specially crafted file, potentially resulting in arbitrary command execution on the underlying operating system.

A SQL injection vulnerability exists in Security Center that could allow an attacker to access unauthorized data from the application's database.

An input validation vulnerability exists in Security Center's file upload handling, where insufficient sanitization of uploaded filenames could contribute to a downstream command injection issue.

An improper access control vulnerability exists where an authenticated non-administrative application user could potentially view settings outside of their assigned scope.

An issue was identified in which CSRF tokens were generated using a predictable method, potentially reducing their effectiveness as a security control. This has been addressed by improving the randomness and entropy of token generation.

A local privilege escalation vulnerability exists in Security Center. An attacker with write access to a specific configuration file could achieve arbitrary code execution with elevated privileges, without requiring further user or victim interaction.

A SQL injection vulnerability exists in Security Center that could allow an authenticated administrator to execute arbitrary SQL queries, potentially resulting in unauthorized access to sensitive data, including credentials.

A privilege escalation vulnerability exists in Tenable Security Center that allows a user with "Security Manager" role and "manage user" permission on a single group to modify users belonging to other groups. This bypasses the intended access control restrictions and enables unauthorized cross-group user management.

A command injection vulnerability exists in Tenable Security Center. An authenticated administrator could modify application configuration values to achieve arbitrary command execution on the underlying operating system when specific backend operations are triggered.

A remote code execution vulnerability exists in Tenable Security Center's report generation functionality. An authenticated, non-administrative user could exploit this issue by supplying specially crafted input that is later processed unsafely during server-side report rendering, resulting in arbitrary code execution with the privileges of the service account.