Tenable

Tenable Identity Exposure is affected by multiple vulnerabilities that allow for remote code execution, denial-of-service, and data confidentiality breaches.

A vulnerability in Tenable Nessus Plugin versions prior to #202610282338 allows an attacker to compromise data confidentiality, as detailed in Tenable security bulletin tns-2026-33.

A stack-based buffer overflow vulnerability in Nessus allows an authenticated user to execute arbitrary code with full system privileges by deploying a malicious NASL vulnerability test script.

A critical vulnerability, CVE-2026-15265, has been discovered in Tenable Nessus Agent versions prior to 11.2.1 and 11.1.4, which allows an attacker to achieve remote code execution and bypass security policies on affected systems, necessitating immediate patching.

Multiple SQL injection vulnerabilities, CVE-2026-57587 and CVE-2026-57588, have been discovered in Tenable Nessus versions prior to 10.12.0, allowing an attacker to perform unauthorized access to or manipulation of the underlying database through specially crafted input.

Multiple vulnerabilities in Tenable Sensor Proxy versions prior to 1.4.0 could allow a remote attacker to cause a denial of service, data confidentiality breaches, and other unspecified security impacts.

Multiple vulnerabilities in Tenable Network Monitor versions prior to 6.5.4 can lead to remote denial of service, security policy bypass, and unspecified security issues.

Tenable released a security advisory on May 14, 2026, addressing critical vulnerabilities in Tenable Network Monitor versions prior to 6.5.4, urging users to apply necessary updates to mitigate potential risks.

Detects network connections to the standard Kerberos port from an unusual process other than lsass.exe, potentially indicating Kerberoasting or Pass-the-Ticket activity on Windows systems.