Loading story…
Tenable disclosed a critical path traversal vulnerability, tracked as CVE-2026-15265, affecting Tenable/Nessus Agent on Linux, Windows, and macOS. The flaw allows a privileged attacker to write arbitrary files outside the intended plugin directory, creating a path to remote code execution. The issue affects version 11.2.0 and 11.1.3 and earlier, and has been classified under CWE-22 and CWE-347 with high impact to confidentiality, integrity, and availability.
Tenable released fixes in versions 11.2.1 and 11.1.4, and the Canadian Centre for Cyber Security issued advisory AV26-705 urging organizations to review Tenable’s guidance and apply updates. CISA enrichment cited in vulnerability tracking data indicates no known exploitation so far, but assessed the technical impact as total, reinforcing the need for rapid patching across exposed agent deployments.
Mallory correlates global threat intelligence with your attack surface — know if you’re exposed before adversaries strike.
3 events from the most recent confirmed update back to the earliest known activity.
The Canadian Centre for Cyber Security published advisory AV26-705 highlighting Tenable's July 14 advisory and urging users and administrators to review it and apply updates. The notice identified the issue as a critical path traversal vulnerability affecting Nessus Agent.
CISA added Stakeholder-Specific Vulnerability Categorization data for CVE-2026-15265 on July 14, 2026. The entry indicated no known exploitation, non-automatable exploitation, and total technical impact.
Tenable published a security advisory on July 14, 2026 for a critical path traversal vulnerability affecting Nessus Agent/Tenable Agent. The flaw affects version 11.2.0 and earlier and 11.1.3 and earlier, and fixed versions 11.2.1 and 11.1.4 were made available.
Vulnerabilities, threat actors, malware, products, organizations, and breaches Mallory has linked to this story.
5 references tracked. Mallory keeps watching after this page renders.
securityweek.com
Open sourcemalware.news
Open sourcecyber.gc.ca
Open sourcetenable.com
Open sourcecvefeed.io
Open sourceMap indicators from this story to your assets and identify affected systems in minutes.
Every observed campaign, victim, and pivot linked to actors named in this story.
Malware, exploits, and IOCs connected to the activity described here.
YARA, Sigma, and Snort rules deployed to your SIEM as soon as they’re published.
Get matching new stories delivered to your team as they break — not the next morning.
Ask questions about this story and take action on the answers.
Other stories Mallory is tracking that overlap on entities, sources, or topic labels.
Tenable released security advisories for multiple products, including vulnerabilities in **Tenable Security Center** version `6.8.0` and earlier and an **arbitrary file deletion** flaw affecting **Nessus Agent** and **Nessus**. The Canadian Centre for Cyber Security urged organizations to review Tenable's advisories and apply vendor updates to reduce exposure across affected deployments. For Security Center, Tenable directed customers on versions `6.5.1`, `6.6.0`, `6.7.2`, and `6.8.0` to apply the stand-alone security patch `SC202604.1`. For the file deletion issue, affected versions include **Nessus Agent** before `11.1.3` and **Nessus** before `10.11.4` and `10.12.0`; Tenable identified `11.1.3`, `10.11.4`, and `10.12.0` as fixed releases. Administrators were advised to update promptly and verify product versions across vulnerability management infrastructure.
Jun 29, 2026
NVIDIA disclosed Security Bulletin **5865** for **NVIDIA Triton Inference Server**, publishing advisory materials and associated MITRE-format CVE records for five vulnerabilities: `CVE-2026-47606`, `CVE-2026-47627`, `CVE-2026-47628`, `CVE-2026-47629`, and `CVE-2026-47630`. The bulletin was released through NVIDIA's product-security repository with CSAF, Markdown, checksum, and CVE JSON files, indicating a coordinated vendor advisory covering multiple issues in the inference-serving platform. The most severe issue publicly detailed is **`CVE-2026-47627`**, a **critical** path traversal vulnerability (`CWE-22`) affecting **NVIDIA Triton Inference Server on Linux** in versions **0.0 through 26.05**. The CVE record assigns a **CVSS v3.1 score of 9.8** with vector `AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H`, and NVIDIA states that successful exploitation could lead to **denial of service**.
Aug 18, 2026
Two high-severity vulnerabilities were disclosed affecting exposed application and device management surfaces, including a flaw that can give attackers **root access** and another that enables **arbitrary file write** through path traversal. **CVE-2026-3587** describes an unauthenticated remote attack path in a hidden CLI function that lets an attacker escape a restricted prompt and gain root access to the underlying Linux operating system, potentially leading to full device compromise. The issue was mapped to `CWE-912` and assigned a `CVSS v3.1` score vector of `AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H`, with CERT VDE publishing advisory `VDE-2026-020`. A separate vulnerability, **CVE-2026-5027**, affects Langflow's `POST /api/v2/files` endpoint, where improper sanitization of the multipart `filename` parameter allows path traversal using `../` sequences. An authenticated attacker can exploit the bug to write files to arbitrary filesystem locations, creating a route to compromise confidentiality, integrity, and availability. The flaw was classified as `CWE-22`, carries the `CVSS v3.1` vector `AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H`, and is referenced in Tenable advisory `TRA-2026-26`.
Jun 29, 2026