Detections
Analytics
CVE-2026-119314
critical
Description
Several vulnerabilities have been identified, reported to Tenable and resolved. Please see the full list of resolved issues below.A command injection vulnerability in the Active Directory Events Listener of Tenable Identity Exposure allows an authenticated, low-privileged attacker to execute arbitrary commands as SYSTEM on the PDCe - CVE-2026-119314A denial-of-service vulnerability exists in the Tenable Identity Exposure GraphQL API. An authenticated, low-privileged user can submit specially crafted queries that consume excessive server resources, potentially degrading or denying service to legitimate users - CVE-2026-119315An information disclosure vulnerability exists in the Tenable Identity Exposure Windows Secure Relay. A failed Secure Relay installation writes the linking key to the local error log, where a user with access to the host could read it - CVE-2026-119316 Tenable has released Tenable Identity Exposure versions 3.93.6 and 3.77.18 to address these issues. The installation files can be obtained from the Tenable Downloads Portal: https://www.tenable.com/downloads/identity-exposure