tenable_identity_exposure_saas vulnerabilities

CVEs whose affected-version data names the tenable_identity_exposure_saas package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2026-106126Critical· 9.9

3w ago

A command injection vulnerability in the Active Directory Events Listener of Tenable Identity Exposure (SaaS) allows an authenticated, low-privileged attacker to execute arbitrary commands as SYSTEM on the PDCe.

A command injection vulnerability in the Active Directory Events Listener of Tenable Identity Exposure (SaaS) allows an authenticated, low-privileged attacker to execute arbitrary commands as SYSTEM on the PDCe.

▾ MidnightTenable, Inc. · Tenable Identity Exposure (SaaS)EPSS 2.2%via NVD