[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fea2uF3kHT96PKUydbCS4xbgKkENNo1BePSIeKgAeUvU":3},{"article":4,"iocs":49,"watch_terms":54,"solutions":55,"lesson":127},{"id":5,"title":6,"slug":7,"summary":8,"ai_summary":9,"brief":10,"url":11,"image_url":12,"published_at":13,"ingested_at":14,"relevance_score":15,"entities":16,"category_id":31,"category":32,"article_tags":36},"fff19548-17fd-43d6-9a55-a6a8ad21a4ee","Trend Micro, Tanium, ESET and Tenable Patch Severe Product Vulnerabilities","trend-micro-tanium-eset-and-tenable-patch-severe-product-vulnerabilities-345002","The cybersecurity companies patched critical and high-severity vulnerabilities in some of their products. The post Trend Micro, Tanium, ESET and Tenable Patch Severe Product Vulnerabilities appeared first on SecurityWeek.","Multiple major cybersecurity vendors released patches this month for severe vulnerabilities in their products. Tenable fixed a critical path traversal (CVE-2026-15265) in Tenable Agent allowing RCE, while ESET patched a high-severity privilege escalation in Inspect Connector and a DoS flaw in Linux products. Tanium and Trend Micro also addressed high-severity DoS and privilege escalation flaws respectively.","Trend Micro, Tanium, ESET, and Tenable patch critical and high-severity vulnerabilities in security products.","https:\u002F\u002Fwww.securityweek.com\u002Ftrend-micro-tanium-eset-and-tenable-patch-severe-product-vulnerabilities\u002F","https:\u002F\u002Fwww.securityweek.com\u002Fwp-content\u002Fuploads\u002F2025\u002F05\u002Ffirewall.jpeg","2026-07-16T06:08:08+00:00","2026-07-16T08:00:18.147136+00:00",8,[17,20,22,24,26,29],{"name":18,"type":19},"Tenable","vendor",{"name":21,"type":19},"ESET",{"name":23,"type":19},"Tanium",{"name":25,"type":19},"Trend Micro",{"name":27,"type":28},"Tenable Agent","product",{"name":30,"type":28},"ESET Inspect Connector","80544778-fabb-4dcd-aa35-17492e5dcf4f",{"id":31,"icon":33,"name":34,"slug":35},null,"Vulnerabilities","vulnerabilities",[37,42,47],{"category":38},{"id":39,"icon":33,"name":40,"slug":41},"02371804-cf6d-4449-98de-f1a2d4d9b266","Tools","tools",{"category":43},{"id":44,"icon":33,"name":45,"slug":46},"26b0b636-0e31-4db1-bffb-61bdf9f20a58","Supply Chain","supply-chain",{"category":48},{"id":31,"icon":33,"name":34,"slug":35},[50],{"type":51,"value":52,"context":53},"cve","CVE-2026-15265","Critical path traversal in Tenable Agent allowing remote code execution",[18,21,23],{"controls":56,"vendors":114},[57,85],{"slug":58,"name":59,"problem":60,"products":61},"vulnerability-management","Vulnerability scanning and prioritisation","You know which systems are vulnerable, and which ones to fix first.",[62,70,78],{"vendor_slug":63,"vendor_name":64,"vendor_logo":65,"product_slug":66,"product_name":67,"url":68,"description":69},"holm-security","Holm Security","\u002Fvendor-logos\u002Fholm-security.png","holm-security-platform","Holm Security Platform","https:\u002F\u002Fwww.holmsecurity.com\u002F","Vulnerability scanning of systems, web applications, cloud and the external attack surface, plus phishing simulation.",{"vendor_slug":71,"vendor_name":72,"vendor_logo":73,"product_slug":74,"product_name":75,"url":76,"description":77},"rapid7","Rapid7","\u002Fvendor-logos\u002Frapid7.png","insightvm","Rapid7 Exposure Command (InsightVM)","https:\u002F\u002Fwww.rapid7.com\u002Fproducts\u002Finsightvm\u002F","Vulnerability scanning and risk-based prioritisation; InsightVM is now part of Exposure Command, alongside attack surface and cloud risk.",{"vendor_slug":79,"vendor_name":18,"vendor_logo":80,"product_slug":81,"product_name":82,"url":83,"description":84},"tenable","\u002Fvendor-logos\u002Ftenable.png","tenable-vulnerability-management","Tenable Vulnerability Management","https:\u002F\u002Fwww.tenable.com\u002Fproducts\u002Fvulnerability-management","Cloud-based vulnerability scanning and prioritisation, built on Nessus.",{"slug":86,"name":87,"problem":88,"products":89},"patch-management","Automated patch management","Known holes get closed in days, not months.",[90,98,106],{"vendor_slug":91,"vendor_name":92,"vendor_logo":93,"product_slug":94,"product_name":95,"url":96,"description":97},"action1","Action1","\u002Fvendor-logos\u002Faction1.png","action1-patch-management","Action1 Patch Management","https:\u002F\u002Fwww.action1.com\u002F","Cloud-native patch management for Windows, macOS and third-party applications.",{"vendor_slug":99,"vendor_name":100,"vendor_logo":101,"product_slug":102,"product_name":103,"url":104,"description":105},"ninjaone","NinjaOne","\u002Fvendor-logos\u002Fninjaone.png","ninjaone-patch-management","NinjaOne Patch Management","https:\u002F\u002Fwww.ninjaone.com\u002Fpatch-management\u002F","Automated patching of operating systems and third-party applications from the cloud.",{"vendor_slug":107,"vendor_name":108,"vendor_logo":109,"product_slug":110,"product_name":111,"url":112,"description":113},"manageengine","ManageEngine","\u002Fvendor-logos\u002Fmanageengine.png","patch-manager-plus","ManageEngine Patch Manager Plus","https:\u002F\u002Fwww.manageengine.com\u002Fpatch-management\u002F","Patch management for operating systems and third-party applications, on premises or in the cloud.",[115,120,125],{"slug":116,"name":21,"logo_path":117,"roles":118},"eset","\u002Fvendor-logos\u002Feset.png",[119],"affected",{"slug":121,"name":122,"logo_path":123,"roles":124},"palo-alto-networks","Palo Alto Networks","\u002Fvendor-logos\u002Fpalo-alto-networks.png",[119],{"slug":79,"name":18,"logo_path":80,"roles":126},[119],{"slug":128,"title":129,"body":130,"framework_refs":131,"framework_notes":141},"major-security-vendors-release-critical-patches-for-severe-product-vulnerabilities","Major Security Vendors Release Critical Patches for Severe Product Vulnerabilities","Multiple leading cybersecurity vendors — Trend Micro, Tanium, ESET, and Tenable — simultaneously disclosed and patched severe vulnerabilities in their own products, including a critical RCE flaw via path traversal in Tenable Agent and privilege escalation issues across several platforms. The root cause lies in insufficient secure development practices and delayed vulnerability identification within products trusted to protect enterprise environments. This is particularly alarming because security tools often operate with elevated privileges and broad network access, meaning a compromised security agent can become a powerful attack vector. Organizations that delay patching these tools face compounded risk, as attackers actively target security software knowing its privileged position in the environment. Prompt patch application and a mature vulnerability management lifecycle are essential to prevent exploitation.",[132,133,134,135,136,137,138,139,140],"CIS Control 7: Continuous Vulnerability Management","CIS Control 2: Inventory and Control of Software Assets","NIST SP 800-40 Rev. 4: Guide to Enterprise Patch Management","NIST SI-2: Flaw Remediation","NIST SA-22: Unsupported System Components","NIST RA-5: Vulnerability Monitoring and Scanning","ITIL Change Management: Emergency Change Procedures","ISO\u002FIEC 27001 A.12.6.1: Management of Technical Vulnerabilities","GDPR Article 32: Security of Processing (timely remediation obligations)",{}]