CVE-2026-106126

Command Injection PUBLISHED

Description (CNA)

A command injection vulnerability in the Active Directory Events Listener of Tenable Identity Exposure (SaaS) allows an authenticated, low-privileged attacker to execute arbitrary commands as SYSTEM on the PDCe.

Affected (CNA)

Vendor / product	Versions
Tenable, Inc. / Tenable Identity Exposure (SaaS)	affected 0 before 3.126.0

CWE

CWE-78

References

https://www.tenable.com/security/tns-2026-27

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.