CVE-2026-106126
Tenable, Inc. Tenable Identity Exposure (SaaS)
Medium priority: severe, but no known exploitation
A command injection vulnerability in the Active Directory Events Listener of Tenable Identity Exposure (SaaS) allows an authenticated, low-privileged attacker to execute arbitrary commands as SYSTEM on the PDCe.