tenable_agent vulnerabilities

Latest tenable_agent CVEs

Newest publication first

1. CVE-2026-15265 Tenable Agent Path Traversal Leading to Remote Code Execution

   Published 2026-07-14

   Critical·CVSS 9.3 EPSS 0.56%

   A path traversal vulnerability in Tenable Agent 11.2.0 and 11.1.3 and lower allows a privileged attacker to write arbitrary files outside the intended plugin directory, potentially leading to remote code execution.

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.