[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fKcIRhpKy1szDAOjVQiWbYYJaHtLgeauy2HryDU0NvVk":3},{"article":4,"iocs":40,"watch_terms":48,"solutions":49,"lesson":29},{"id":5,"title":6,"slug":7,"summary":8,"ai_summary":9,"brief":10,"url":11,"image_url":12,"published_at":13,"ingested_at":14,"relevance_score":15,"entities":16,"category_id":27,"category":28,"article_tags":32},"b3d05df8-6f4e-484c-bed7-e64cef2ef5ec","Vulnerabilities Patched in CrowdStrike, Tenable Products","vulnerabilities-patched-in-crowdstrike-tenable-products-ed9a44","CrowdStrike has fixed a critical LogScale vulnerability, while Tenable addressed a high-severity Nessus flaw. The post Vulnerabilities Patched in CrowdStrike, Tenable Products appeared first on SecurityWeek.","CrowdStrike disclosed CVE-2026-40050, a critical unauthenticated path traversal vulnerability in LogScale that allows remote attackers to read arbitrary files, with no evidence of active exploitation. Tenable published advisories for CVE-2026-33694, a high-severity vulnerability in Nessus on Windows that could enable arbitrary file deletion and code execution via junctions with System privileges.","CrowdStrike patches critical LogScale path traversal; Tenable fixes high-severity Nessus Windows flaw.","https:\u002F\u002Fwww.securityweek.com\u002Fvulnerabilities-patched-in-crowdstrike-tenable-products\u002F","https:\u002F\u002Fwww.securityweek.com\u002Fwp-content\u002Fuploads\u002F2024\u002F09\u002Fantivirus-security-product.jpeg","2026-04-24T09:49:27+00:00","2026-04-24T10:00:11.136306+00:00",8,[17,20,22,25],{"name":18,"type":19},"CrowdStrike","vendor",{"name":21,"type":19},"Tenable",{"name":23,"type":24},"LogScale","product",{"name":26,"type":24},"Nessus","80544778-fabb-4dcd-aa35-17492e5dcf4f",{"id":27,"icon":29,"name":30,"slug":31},null,"Vulnerabilities","vulnerabilities",[33,38],{"category":34},{"id":35,"icon":29,"name":36,"slug":37},"02371804-cf6d-4449-98de-f1a2d4d9b266","Tools","tools",{"category":39},{"id":27,"icon":29,"name":30,"slug":31},[41,45],{"type":42,"value":43,"context":44},"cve","CVE-2026-40050","Critical unauthenticated path traversal in CrowdStrike LogScale allowing arbitrary file read",{"type":42,"value":46,"context":47},"CVE-2026-33694","High-severity vulnerability in Tenable Nessus on Windows enabling arbitrary file deletion and code execution",[18,21,23],{"controls":50,"vendors":109},[51,80],{"slug":52,"name":53,"problem":54,"products":55},"vulnerability-management","Vulnerability scanning and prioritisation","You know which systems are vulnerable, and which ones to fix first.",[56,64,72],{"vendor_slug":57,"vendor_name":58,"vendor_logo":59,"product_slug":60,"product_name":61,"url":62,"description":63},"axonius","Axonius","\u002Fvendor-logos\u002Faxonius.png","axonius-exposures","Axonius Exposures","https:\u002F\u002Fwww.axonius.com\u002Fplatform\u002Fexposures","Brings findings from different scanners together with asset and business context, to show what matters most and track fixes to the end.",{"vendor_slug":65,"vendor_name":66,"vendor_logo":67,"product_slug":68,"product_name":69,"url":70,"description":71},"rapid7","Rapid7","\u002Fvendor-logos\u002Frapid7.png","insightvm","Rapid7 Exposure Command (InsightVM)","https:\u002F\u002Fwww.rapid7.com\u002Fproducts\u002Finsightvm\u002F","Vulnerability scanning and risk-based prioritisation; InsightVM is now part of Exposure Command, alongside attack surface and cloud risk.",{"vendor_slug":73,"vendor_name":74,"vendor_logo":75,"product_slug":76,"product_name":77,"url":78,"description":79},"holm-security","Holm Security","\u002Fvendor-logos\u002Fholm-security.png","holm-security-platform","Holm Security Platform","https:\u002F\u002Fwww.holmsecurity.com\u002F","Vulnerability scanning of systems, web applications, cloud and the external attack surface, plus phishing simulation.",{"slug":81,"name":82,"problem":83,"products":84},"patch-management","Automated patch management","Known holes get closed in days, not months.",[85,93,101],{"vendor_slug":86,"vendor_name":87,"vendor_logo":88,"product_slug":89,"product_name":90,"url":91,"description":92},"microsoft","Microsoft","\u002Fvendor-logos\u002Fmicrosoft.png","intune","Microsoft Intune","https:\u002F\u002Fwww.microsoft.com\u002Fen-us\u002Fsecurity\u002Fbusiness\u002Fmicrosoft-intune","Device management for Windows, macOS, iOS and Android, including update rings and compliance policies.",{"vendor_slug":94,"vendor_name":95,"vendor_logo":96,"product_slug":97,"product_name":98,"url":99,"description":100},"ivanti","Ivanti","\u002Fvendor-logos\u002Fivanti.png","neurons-patch-management","Ivanti Neurons for Patch Management","https:\u002F\u002Fwww.ivanti.com\u002Fproducts\u002Fivanti-neurons-for-patch-management","Risk-based patch management for operating systems and third-party applications.",{"vendor_slug":102,"vendor_name":103,"vendor_logo":104,"product_slug":105,"product_name":106,"url":107,"description":108},"manageengine","ManageEngine","\u002Fvendor-logos\u002Fmanageengine.png","patch-manager-plus","ManageEngine Patch Manager Plus","https:\u002F\u002Fwww.manageengine.com\u002Fpatch-management\u002F","Patch management for operating systems and third-party applications, on premises or in the cloud.",[110,115],{"slug":111,"name":18,"logo_path":112,"roles":113},"crowdstrike","\u002Fvendor-logos\u002Fcrowdstrike.png",[114],"affected",{"slug":116,"name":21,"logo_path":117,"roles":118},"tenable","\u002Fvendor-logos\u002Ftenable.png",[114]]