Tenable Identity Exposure < 3.93.5 Multiple Vulnerabilities (TNS-2026-16)

high Nessus Plugin ID 322483

Synopsis

An identity security and threat detection platform running on the remote host is affected by multiple vulnerabilities.

Description

The version of Tenable Identity Exposure running on the remote host is prior to 3.93.5. It is, therefore, affected by multiple vulnerabilities according to advisory TNS-2026-16:

- Tenable Identity Exposure contains multiple unauthenticated API endpoints under /w/api/* that expose sensitive application configuration data including cleartext LDAP credentials, SAML configuration, user accounts, and directory settings to unauthenticated remote attackers. Affected responses are served with Cache-Control: public headers and without Vary: Cookie, allowing reverse proxies and CDNs to cache and serve sensitive data to unauthenticated users even after authentication is applied. (CVE-2026-13007)

- Inconsistent interpretation of http requests ('http request/response smuggling') in ASP.NET Core allows an authorized attacker to bypass a security feature over a network. (CVE-2025-55315)

- Converting an excessively large OCTET STRING value to a hexadecimal string leads to a heap buffer overflow on 32 bit platforms. A heap buffer overflow may lead to a crash or possibly an attacker controlled code execution or other undefined behavior. (CVE-2026-31789)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Solution

Upgrade to Tenable Identity Exposure version 3.93.5 or later.

Plugin Details

Severity: High

ID: 322483

File Name: tenable_identity_exposure_TNS_2026_16.nasl

Version: 1.1

Type: Combined

Family: Misc.

Published: 6/24/2026

Updated: 6/24/2026

Configuration: Enable thorough checks (optional)

Supported Sensors: Nessus

Risk Information

VPR

Risk Factor: High

Score: 8.4

CVSS v2

Risk Factor: Critical

Base Score: 10

Vector: CVSS2#AV:N/AC:L/Au:N/C:C/I:C/A:C

CVSS Score Source: CVE-2026-31789

CVSS v3

Risk Factor: Critical

Base Score: 9.9

Vector: CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:L

CVSS Score Source: CVE-2025-55315

CVSS v4

Risk Factor: High

Base Score: 8.7

Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:L/SI:L/SA:N

CVSS Score Source: CVE-2026-13007

Vulnerability Information

CPE: cpe:/a:tenable:tenable_ad, cpe:/a:tenable:tenable_identity_exposure

Required KB Items: installed_sw/Tenable.ad

Patch Publication Date: 6/23/2026

Vulnerability Publication Date: 6/23/2026

Reference Information

CVE: CVE-2025-11187, CVE-2025-13034, CVE-2025-14017, CVE-2025-14524, CVE-2025-14819, CVE-2025-15079, CVE-2025-15224, CVE-2025-15467, CVE-2025-15468, CVE-2025-15469, CVE-2025-55130, CVE-2025-55131, CVE-2025-55132, CVE-2025-55247, CVE-2025-55248, CVE-2025-55315, CVE-2025-59465, CVE-2025-59466, CVE-2025-66199, CVE-2025-68160, CVE-2025-69418, CVE-2025-69419, CVE-2025-69420, CVE-2025-69421, CVE-2026-13007, CVE-2026-1965, CVE-2026-21218, CVE-2026-21262, CVE-2026-21637, CVE-2026-21710, CVE-2026-21713, CVE-2026-21714, CVE-2026-21715, CVE-2026-21716, CVE-2026-21717, CVE-2026-22795, CVE-2026-22796, CVE-2026-26130, CVE-2026-26171, CVE-2026-2673, CVE-2026-28386, CVE-2026-28387, CVE-2026-28388, CVE-2026-28389, CVE-2026-28390, CVE-2026-31789, CVE-2026-31790, CVE-2026-32167, CVE-2026-32175, CVE-2026-32176, CVE-2026-32177, CVE-2026-32178, CVE-2026-32203, CVE-2026-33116, CVE-2026-33120, CVE-2026-34180, CVE-2026-34181, CVE-2026-34182, CVE-2026-34183, CVE-2026-35188, CVE-2026-35433, CVE-2026-3783, CVE-2026-3784, CVE-2026-3805, CVE-2026-40370, CVE-2026-42764, CVE-2026-42765, CVE-2026-42766, CVE-2026-42767, CVE-2026-42768, CVE-2026-42769, CVE-2026-42770, CVE-2026-42771, CVE-2026-42789, CVE-2026-42790, CVE-2026-42899, CVE-2026-45445, CVE-2026-45446, CVE-2026-45447, CVE-2026-45490, CVE-2026-45491, CVE-2026-45591, CVE-2026-4873, CVE-2026-5545, CVE-2026-5773, CVE-2026-6253, CVE-2026-6276, CVE-2026-6429, CVE-2026-7009, CVE-2026-7168, CVE-2026-7383, CVE-2026-9076

Detections

Analytics