# Tenable Patches RCE Flaws in Security Center

Published: 2026-10-23 · Severity: high · Sectors: Technology
Canonical: https://vorant.io/reports/e9bcd43f-e32f-5a18-b8d0-9cb4a292537b/tenable-patches-rce-flaws-in-security-center

> CERT-FR warns of multiple remote code execution vulnerabilities in Tenable Enclave Security and Security Center, patched by update SC-202610.1.

CERT-FR issued an advisory covering multiple vulnerabilities in Tenable's Enclave Security and Security Center products. The flaws, tracked as CVE-2026-109618 and CVE-2026-109619, allow an attacker to achieve remote arbitrary code execution. All versions of both products lacking the SC-202610.1 patch are affected.

Tenable published two security bulletins (tns-2026-28 and tns-2026-29) on 22 October 2026 detailing the fixes. No indication of active exploitation in the wild is given in the advisory. Defenders running Tenable Enclave Security or Security Center should apply the SC-202610.1 correctif as soon as possible to remediate the vulnerabilities.

## Mentioned in this report

- Vulnerabilities: CVE-2026-109618 (templated), CVE-2026-109619

Source reporting: https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-1370

---

This is the free public brief from Vorant Threat Intelligence. When citing, attribute "Vorant" and link https://vorant.io/reports/e9bcd43f-e32f-5a18-b8d0-9cb4a292537b/tenable-patches-rce-flaws-in-security-center.
In the app the same report carries live profiles of the CVEs it names. The paid plans add the security research and news reporting the free tier leaves out. Slack alerts on the vendors, sectors and countries a reader follows come with the paid plans too. A new account starts with a three-day trial, no card: https://vorant.io/signup