# Tenable Security Center RCE flaws patched

Published: 2026-10-26 · Severity: high · Sectors: Technology
Canonical: https://vorant.io/reports/da6d5fc5-beb9-5d8c-91b8-668b8b0f3304/tenable-security-center-rce-flaws-patched

> CERT-FR warns of multiple remote code execution vulnerabilities in Tenable Security Center and Enclave Security, fixed in SC-202610.2.

CERT-FR issued an advisory covering multiple vulnerabilities in Tenable's Enclave Security and Security Center products that could allow an attacker to achieve arbitrary remote code execution. The affected systems are those running versions without the SC-202610.2 patch. Tenable published two security bulletins (tns-2026-30 and tns-2026-31) on 23 October 2026 detailing the issues, tracked as CVE-2026-109618 and CVE-2026-109619.

No evidence of active in-the-wild exploitation is mentioned in the advisory. Defenders operating Tenable Security Center or Enclave Security should apply the SC-202610.2 patch as soon as possible and consult the vendor bulletins for full technical details and remediation guidance.

## Mentioned in this report

- Vulnerabilities: CVE-2026-109618 (templated), CVE-2026-109619

Source reporting: https://www.cert.cyber.gouv.fr/avis/CERTFR-2026-AVI-1381

---

This is the free public brief from Vorant Threat Intelligence. When citing, attribute "Vorant" and link https://vorant.io/reports/da6d5fc5-beb9-5d8c-91b8-668b8b0f3304/tenable-security-center-rce-flaws-patched.
In the app the same report carries live profiles of the CVEs it names. The paid plans add the security research and news reporting the free tier leaves out. Slack alerts on the vendors, sectors and countries a reader follows come with the paid plans too. A new account starts with a three-day trial, no card: https://vorant.io/signup