Tenable Critical Vulnerabilities in Tenable Security Center Prompt Urgent Patch Release
Article Content
- •Tenable released a critical patch addressing multiple vulnerabilities in Security Center.
- •Key vulnerabilities include SQL Injection (CVE-2026-64877) and Command Injection (CVE-2026-64878).
- •Users are strongly advised to upgrade affected third-party components immediately.
Tenable has released Security Center Patch SC202607.1 to address multiple vulnerabilities in third-party components, including Apache, OpenSSL, PostgreSQL, PHP, and Redis. The patch resolves critical issues such as SQL Injection (CVE-2026-64877) and Command Injection (CVE-2026-64878). A total of six vulnerabilities were reported and addressed, with CVE-2026-64880 classified as high severity. Users are urged to upgrade to the latest versions of the affected libraries to mitigate potential risks. The vulnerabilities could allow unauthorized access or data manipulation, impacting systems using Tenable Security Center versions 6.6.0, 6.7.2, and 6.8.0. Timely application of this patch is crucial for maintaining security.
Ask AI about this cluster
Answers cite the sources they use
Timeline
More articles in this cluster (5)
Following this threat?
Track CVE-2026-64880 in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.
Free account · no card needed
Continue Reading
Critical BeyondTrust 9.3 Vulnerability Actively Exploited by Threat Actor A critical vulnerability (CVE-2026-102764) in BeyondTrust Remote Support has been discovered and is actively being exploited by the threat group ARMORY CASTLE, reportedly linked to China. The vulnerability, which has a CVSS score of 9.3, allows unauthenticated attackers to upload files and potentially compromise host…