CVE record · 1 source
CVE-2026-106126
CVSS 9.9A command injection vulnerability in the Active Directory Events Listener of Tenable Identity Exposure (SaaS) allows an authenticated, low-privileged…
- Vendor
- Microsoft, Tenable
- Product
- Active Directory / Entra ID, Nessus / Tenable.io / Security Center
- CVSS
- 9.9
- EPSS
- 0.022 (p82)
- Exposure class
- Identity, Network management
Coverage
1Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.
-
A command injection vulnerability in the Active Directory Events Listener of Tenable Identity Exposure (SaaS) allows an authenticated, low-privileged…
A command injection vulnerability in the Active Directory Events Listener of Tenable Identity Exposure (SaaS) allows an authenticated, low-privileged attacker to execute arbitrary commands as SYSTEM on the PDCe.