Loading story…
Tenable released security advisories for multiple products, including vulnerabilities in Tenable Security Center version 6.8.0 and earlier and an arbitrary file deletion flaw affecting Nessus Agent and Nessus. The Canadian Centre for Cyber Security urged organizations to review Tenable's advisories and apply vendor updates to reduce exposure across affected deployments.
For Security Center, Tenable directed customers on versions 6.5.1, 6.6.0, 6.7.2, and 6.8.0 to apply the stand-alone security patch SC202604.1. For the file deletion issue, affected versions include Nessus Agent before 11.1.3 and Nessus before 10.11.4 and 10.12.0; Tenable identified 11.1.3, 10.11.4, and 10.12.0 as fixed releases. Administrators were advised to update promptly and verify product versions across vulnerability management infrastructure.
Mallory correlates global threat intelligence with your attack surface — know if you’re exposed before adversaries strike.
2 events from the most recent confirmed update back to the earliest known activity.
On 2026-04-23, Tenable published a security advisory for an arbitrary file deletion vulnerability affecting Nessus Agent versions before 11.1.3 and Nessus versions before 10.11.4 and 10.12.0. Tenable identified fixed versions as Nessus Agent 11.1.3 and Nessus 10.11.4 and 10.12.0.
On 2026-04-09, Tenable published a security advisory for vulnerabilities affecting Tenable Security Center version 6.8.0 and earlier. The advisory directed users to apply updates, including the stand-alone security patch SC202604.1 for versions 6.5.1, 6.6.0, 6.7.2, and 6.8.0.
2 references tracked. Mallory keeps watching after this page renders.
Map indicators from this story to your assets and identify affected systems in minutes.
Every observed campaign, victim, and pivot linked to actors named in this story.
Malware, exploits, and IOCs connected to the activity described here.
YARA, Sigma, and Snort rules deployed to your SIEM as soon as they’re published.
Get matching new stories delivered to your team as they break — not the next morning.
Ask questions about this story and take action on the answers.
Other stories Mallory is tracking that overlap on entities, sources, or topic labels.
Tenable published a security advisory addressing **critical vulnerabilities** in **Tenable Security Center** affecting versions `6.6.0` through `6.8.0`, prompting a warning from the Canadian Centre for Cyber Security. The notice directs administrators to review Tenable’s advisory and apply updates to exposed systems, with the Cyber Centre emphasizing prompt remediation for affected deployments. A stand-alone patch, **`SC202607.1`**, is available for **Tenable Security Center** versions `6.6.0`, `6.7.2`, and `6.8.0`. The advisory fits a broader pattern of ongoing Tenable product security updates across its portfolio, but the immediate issue is the remediation of critical flaws in Security Center that could leave unpatched instances at significant risk.
Jul 21, 2026
Tenable disclosed a critical path traversal vulnerability, tracked as **`CVE-2026-15265`**, affecting **Tenable/Nessus Agent** on **Linux, Windows, and macOS**. The flaw allows a privileged attacker to write arbitrary files outside the intended plugin directory, creating a path to **remote code execution**. The issue affects **version 11.2.0** and **11.1.3 and earlier**, and has been classified under **`CWE-22`** and **`CWE-347`** with high impact to confidentiality, integrity, and availability. Tenable released fixes in **versions 11.2.1 and 11.1.4**, and the **Canadian Centre for Cyber Security** issued advisory **AV26-705** urging organizations to review Tenable’s guidance and apply updates. CISA enrichment cited in vulnerability tracking data indicates **no known exploitation** so far, but assessed the technical impact as total, reinforcing the need for rapid patching across exposed agent deployments.
Jul 16, 2026
The Canadian Centre for Cyber Security issued multiple **alerts and advisories** urging organizations to apply vendor patches for newly disclosed vulnerabilities across widely deployed enterprise platforms, including **Splunk** (Enterprise, Cloud Platform, Universal Forwarder, and *DB Connect* prior to `4.2.0`), **GitHub Enterprise Server** (patched releases `3.19.2`, `3.18.5`, `3.17.11`, `3.16.14`, `3.15.18`, `3.14.23`), **Jenkins** (Weekly `2.550` and prior; LTS `2.541.1` and prior), and **Atlassian** products (**Bamboo**, **Confluence**, and **Crowd** Data Center/Server across multiple versions). The advisories are framed as patch-and-mitigate guidance rather than incident reporting, emphasizing rapid update adoption to reduce exposure. Additional vendor guidance highlighted kernel-level risk and security tooling exposure. **Tenable** released a critical update for **Tenable Security Center** (`6.7.2` and prior) via stand-alone patches, and **Red Hat** published multiple advisories (Feb 9–15) including **Linux kernel** fixes across several RHEL-related offerings (e.g., *Red Hat Enterprise Linux* and *CodeReady Linux Builder*). Separately, F5 tracked a **Linux kernel vulnerability** identified as **CVE-2025-22026** in its product advisory, reinforcing the need to prioritize kernel patching where affected components are present.
Jun 29, 2026