# Tenable Patches RCE Flaws in Security Center

Published: 2026-10-23 · Severity: high · Sectors: Technology
Canonical: https://vorant.io/reports/d1632978-3d49-5520-a68b-bd5707050e8b/tenable-patches-rce-flaws-in-security-center

> CERT-FR warns of remote code execution vulnerabilities in Tenable Enclave Security and Security Center, fixed in patch SC-202610.1.

CERT-FR issued an advisory describing multiple vulnerabilities in Tenable Enclave Security and Tenable Security Center products that could allow an attacker to achieve remote code execution. All versions lacking the SC-202610.1 patch are affected. The advisory references two Tenable security bulletins (tns-2026-28 and tns-2026-29) published on 22 October 2026, and two associated CVEs: CVE-2026-109618 and CVE-2026-109619.

No detail is provided on exploitation in the wild, attack vectors, or technical specifics of the vulnerabilities beyond the risk classification of remote code execution. Defenders running Tenable Enclave Security or Tenable Security Center should apply the SC-202610.1 patch as soon as possible and consult the referenced Tenable bulletins for further technical details and version-specific guidance.

## Mentioned in this report

- Vulnerabilities: CVE-2026-109618 (templated), CVE-2026-109619

Source reporting: https://www.cert.cyber.gouv.fr/avis/CERTFR-2026-AVI-1370

---

This is the free public brief from Vorant Threat Intelligence. When citing, attribute "Vorant" and link https://vorant.io/reports/d1632978-3d49-5520-a68b-bd5707050e8b/tenable-patches-rce-flaws-in-security-center.
In the app the same report carries live profiles of the CVEs it names. The paid plans add the security research and news reporting the free tier leaves out. Slack alerts on the vendors, sectors and countries a reader follows come with the paid plans too. A new account starts with a three-day trial, no card: https://vorant.io/signup