Tenable Identity Exposure: Multiple vulnerabilities (CVE-2026-119314, CVE-2026-119315, CVE-2026-119316)
Tenable Identity Exposure is affected by multiple vulnerabilities that allow for remote code execution, denial-of-service, and data confidentiality breaches.
CVE search metadata
CVE search record: CVE-2026-119314. KEV: no. Product: Tenable Identity Exposure (< 3.77.18), Tenable Identity Exposure (3.x < 3.93.6). Brief: Tenable Identity Exposure: Multiple vulnerabilities (CVE-2026-119314, CVE-2026-119315, CVE-2026-119316). Brief link: https://feed.craftedsignal.io/briefs/2026-11-tenable-identity-exposure/
CVE search record: CVE-2026-119315. KEV: no. Product: Tenable Identity Exposure (< 3.77.18), Tenable Identity Exposure (3.x < 3.93.6). Brief: Tenable Identity Exposure: Multiple vulnerabilities (CVE-2026-119314, CVE-2026-119315, CVE-2026-119316). Brief link: https://feed.craftedsignal.io/briefs/2026-11-tenable-identity-exposure/
CVE search record: CVE-2026-119316. KEV: no. Product: Tenable Identity Exposure (< 3.77.18), Tenable Identity Exposure (3.x < 3.93.6). Brief: Tenable Identity Exposure: Multiple vulnerabilities (CVE-2026-119314, CVE-2026-119315, CVE-2026-119316). Brief link: https://feed.craftedsignal.io/briefs/2026-11-tenable-identity-exposure/
Triage facts
Revision 1- Applicability
- Tenable Identity Exposure (< 3.77.18), Tenable Identity Exposure (3.x < 3.93.6)
- Evidence
- Unknown
- Severity
- High
- Action
- Elevated
- Sources
- 5 public sources
- Freshness
- Revision 1Nov 2, 15:34 UTC
- Vulnerabilities
- 3 CVEs
- Source quality
- A1Likely
Tenable has released security bulletin tns-2026-34 addressing multiple vulnerabilities in Tenable Identity Exposure. These flaws can be leveraged by a remote attacker to execute arbitrary code, perform a denial-of-service, or gain unauthorized access to sensitive data. The identified CVEs include CVE-2026-119314, CVE-2026-119315, and CVE-2026-119316.
Impact
Successful exploitation may result in remote code execution, remote denial-of-service, or the compromise of data confidentiality within the affected Tenable Identity Exposure environment.
Recommendation
Identify and patch all instances of Tenable Identity Exposure. Upgrade to the versions specified in the Tenable security bulletin tns-2026-34 (specifically version 3.77.18 or higher for 3.x branches earlier than 3.77.18, and 3.93.6 or higher for 3.x branches earlier than 3.93.6).
Immediate actions
Patch Tenable Identity Exposure to versions 3.77.18+ or 3.93.6+
Mitigations
Upgrade Tenable Identity Exposure to versions 3.77.18 or 3.93.6
CVE-2026-119314, CVE-2026-119315, CVE-2026-119316