Tenable
Research

Industry-leading exposure research and insight

The Tenable Research team includes cybersecurity, cloud and data science experts who deliver industry-leading exposure management intelligence, data science insights, alerts and security advisories to help customers reduce cyber risk. The team also performs extensive research in emerging technologies such as AI and emerging threats.

Contact us

Research alerts

CRITICAL vulnerability of interest
CVE-2026-20896: This critical authentication bypass vulnerability affecting Gitea has been exploited in the wild. Immediate patching is recommended.
CRITICAL vulnerability of interest
CVE-2026-48282: Reports indicate that in-the-wild exploitation has been observed for this ColdFusion vulnerability. Organizations are strongly advised to apply the available patches soon.
HIGH vulnerability of interest
CVE-2026-8451: Researchers observed exploitation attempts for this flaw in Citrix NetScaler devices shortly after exploit details became public. Patch as soon as possible.
CRITICAL vulnerability of interest
CVE-2026-48558: Exploitation of this authentication bypass vulnerability affecting SimpleHelp servers has been reported. Patches should be applied to mitigate this risk
CRITICAL vulnerability of interest
CVE-2026-46817: Exploitation has been reported for this Oracle E-Business Suite vulnerability. Patches are available and should be applied as soon as possible.
HIGH vulnerability of interest
CVE-2026-45659: CISA added this SharePoint remote code execution vulnerability to the Known Exploited Vulnerabilities (KEV) catalog. Please apply the available patches as soon as possible.
HIGH vulnerability of interest
CVE-2025-49113: A China-aligned threat cluster, UNK_MassTraction, has been linked to exploitation of known Roundcube vulnerabilities. Apply the available patches as soon as possible.
CRITICAL vulnerability of interest
CVE-2024-42009: A China-aligned threat cluster, UNK_MassTraction, has been linked to exploitation of known Roundcube vulnerabilities. Apply the available patches as soon as possible.
CRITICAL vulnerability being monitored
CVE-2026-50746: This maximum severity command injection flaw affecting Ubiquiti UniFi connect should be patched as soon as possible. No current exploitation has been reported.

Explore research resources

CISA known exploited vulnerabilities (KEV) coverage

Research release highlights

Content portal

Plugins pipeline

Tenable Research
publications

Research Special Operations blog Research blog
Research
What the Miasma campaign reveals about the new supply chain threat model and the underground market for developer credentials image
Jun 23 2026

What the Miasma campaign reveals about the new supply chain threat model and the underground market for developer credentials

Research
Download pumping: New npm deception technique for supply chain attacks image
May 28 2026

Download pumping: New npm deception technique for supply chain attacks

Research
Inside the customer environment: Where threat actors, vulnerabilities, and exposed assets intersect image
May 27 2026

Inside the customer environment: Where threat actors, vulnerabilities, and exposed assets intersect

تنبيهات المخاطر الإلكترونية
Key findings from the Verizon DBIR 2026: Slower vulnerability remediation meets faster exploitation image
May 19 2026

Key findings from the Verizon DBIR 2026: Slower vulnerability remediation meets faster exploitation

Research
Why the approaching flood of vulnerabilities changes everything — and what to do about it image
May 8 2026

Why the approaching flood of vulnerabilities changes everything — and what to do about it

الأمن السحابي
Supply chain attack on Axios npm package: Scope, impact, and remediations image
Mar 31 2026

Supply chain attack on Axios npm package: Scope, impact, and remediations

Research
The hidden cost of AI speed: Unmanaged cyber risk image
Mar 23 2026

The hidden cost of AI speed: Unmanaged cyber risk

الأمن السحابي
New Malicious npm Package "ambar-src" Targets Developers with Open Source Malware image
Feb 24 2026

New Malicious npm Package "ambar-src" Targets Developers with Open Source Malware

Research
Dynamic Objects in Active Directory: The Stealthy Threat image
Feb 20 2026

Dynamic Objects in Active Directory: The Stealthy Threat

Learn more about Tenable

الوظائف

Secure your spot @ Tenable Research

الجوائز

See why customers trust Tenable

Community

Learn, share, and contribute