CVE-2026-13007 — Insecure Public Caching on REST API Endpoints in Tenable Identity Exposure

CVE-2026-13007

Insecure Public Caching on REST API Endpoints in Tenable Identity Exposure PUBLISHED

Description (CNA)

Tenable Identity Exposure contains multiple unauthenticated API endpoints under /w/api/* that expose sensitive application configuration data including cleartext LDAP credentials, SAML configuration, user accounts, and directory settings to unauthenticated remote attackers. Affected responses are served with Cache-Control: public headers and without Vary: Cookie, allowing reverse proxies and CDNs to cache and serve sensitive data to unauthenticated users even after authentication is applied.

Affected (CNA)

Vendor / product	Versions
tenable / Tenable Identity Exposure	affected 0 before 3.93.5

CWE

CWE-306, CWE-524

References

https://www.tenable.com/security/research/tns-2026-16

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.