CERT-FR Warns of Multiple Vulnerabilities in Tenable Identity Exposure Enabling RCE, DoS and Data Exposure
The French CERT-FR issued advisory CERTFR-2026-AVI-1436 covering multiple vulnerabilities in Tenable Identity Exposure. The flaws allow an attacker to achieve remote code execution, remote denial of service, and unauthorized access to confidential data. Affected versions include Tenable Identity Exposure 3.x prior to 3.93.6 and versions prior to 3.77.18. CERT-FR references Tenable's security bulletin tns-2026-34, published 30 October 2026, and three associated CVEs. No active exploitation is reported.
Entenda a falha
A vulnerabilidade
Tenable Identity Exposure has multiple vulnerabilities, tracked as CVE-2026-119314, CVE-2026-119315 and CVE-2026-119316. CERT-FR says some of them let an attacker achieve remote arbitrary code execution, remote denial of service and a breach of data confidentiality. The articles do not say which CVE causes which impact, nor what access or authentication is needed. Affected: 3.x versions before 3.93.6 and versions before 3.77.18, which are the fixed releases. The fixes are listed in Tenable bulletin tns-2026-34.
Como foi descoberta
The articles do not say who found the flaws or how. Tenable published bulletin tns-2026-34 on 30 October 2026, and CERT-FR issued advisory CERTFR-2026-AVI-1436 on 2 November 2026 pointing to it. No active exploitation is reported.
Explicação gerada por IA a partir da matéria e dos artigos, em 04/11/2026 14:18.
Detalhes técnicos
- Impact: remote code execution, remote denial of service, confidentiality breach.
- Affected product: Tenable Identity Exposure versions 3.x prior to 3.93.6, and versions prior to 3.77.18.
- Vulnerabilities: CVE-2026-119314, CVE-2026-119315, CVE-2026-119316.
- Source: Tenable security bulletin tns-2026-34, 30 October 2026.
Remediação
- Apply the patches referenced in Tenable's security bulletin tns-2026-34.
Linha do tempo
-
CERT-FR Warns of Multiple Vulnerabilities in Tenable Identity Exposure Enabling RCE, DoS and Data Exposure
ler a análise desta fonte ocultar
The French CERT-FR issued advisory CERTFR-2026-AVI-1436 covering multiple vulnerabilities in Tenable Identity Exposure. The flaws allow an attacker to achieve remote code execution, remote denial of service, and unauthorized access to confidential data. Affected versions include Tenable Identity Exposure 3.x prior to 3.93.6 and versions prior to 3.77.18. CERT-FR references Tenable's security bulletin tns-2026-34, published 30 October 2026, and three associated CVEs. No active exploitation is reported.
Technical Details
- Impact: remote code execution, remote denial of service, confidentiality breach.
- Affected product: Tenable Identity Exposure versions 3.x prior to 3.93.6, and versions prior to 3.77.18.
- Vulnerabilities: CVE-2026-119314, CVE-2026-119315, CVE-2026-119316.
- Source: Tenable security bulletin tns-2026-34, 30 October 2026.
Remediation
- Apply the patches referenced in Tenable's security bulletin tns-2026-34.