Tenable
Research

Industry-leading exposure research and insight

The Tenable Research team includes cybersecurity, cloud and data science experts who deliver industry-leading exposure management intelligence, data science insights, alerts and security advisories to help customers reduce cyber risk. The team also performs extensive research in emerging technologies such as AI and emerging threats.

Contact us

Research alerts

MEDIUM vulnerability of interest
CVE-2026-20262: This zero-day affecting Cisco SD-WAN Manager has been exploited in the wild. Exploitation requires credentials and patches are available.
CRITICAL vulnerability of interest
CVE-2026-35273: Researchers confirm ShinyHunters (UNC6240) exploited this vulnerability as a zero-day primarily against the education sector. Apply the available patches as soon as possible.
CRITICAL vulnerability of interest
CVE-2026-20253: Exploitation has been observed for this flaw in Splunk Enterprise following the publication of a proof-of-concept exploit. Apply the available patches as soon as possible.
CRITICAL vulnerability of interest
CVE-2026-25089: This vulnerability affecting Fortinet's FortiSandbox has been reportedly exploited in the wild. Immediate patching is recommended
CRITICAL vulnerability of interest
CVE-2026-10520: Exploitation of a command injection flaw in Ivanti Sentry has been observed 24 hours after public PoC became available. Apply the available patches as soon as possible.
CRITICAL vulnerability of interest
CVE-2026-48907: Reports indicate this vulnerability in the Widget Factory Joomla Content Editor (JCE) plugin has been exploited in the wild. Apply the available patch as soon as possible.
CRITICAL vulnerability of interest
CVE-2026-0257: Researchers observed an increase in exploitation attempts for this authentication bypass flaw in GlobalProtect/Prisma Access. Apply the available patches as soon as possible.
CRITICAL vulnerability of interest
CVE-2026-39813: This vulnerability affecting Fortinet's FortiSandbox has been reportedly exploited in the wild. Immediate patching is recommended
CRITICAL vulnerability of interest
CVE-2026-39808: This vulnerability affecting Fortinet's FortiSandbox has been reportedly exploited in the wild. Immediate patching is recommended

Explore research resources

CISA known exploited vulnerabilities (KEV) coverage

Research release highlights

Content portal

Plugins pipeline

Tenable Research
publications

Research Special Operations blog Research blog
Research
What the Miasma campaign reveals about the new supply chain threat model and the underground market for developer credentials image
Jun 23 2026

What the Miasma campaign reveals about the new supply chain threat model and the underground market for developer credentials

Research
Download pumping: New npm deception technique for supply chain attacks image
May 28 2026

Download pumping: New npm deception technique for supply chain attacks

Research
Inside the customer environment: Where threat actors, vulnerabilities, and exposed assets intersect image
May 27 2026

Inside the customer environment: Where threat actors, vulnerabilities, and exposed assets intersect

Cyber Exposure Alerts
Key findings from the Verizon DBIR 2026: Slower vulnerability remediation meets faster exploitation image
May 19 2026

Key findings from the Verizon DBIR 2026: Slower vulnerability remediation meets faster exploitation

Research
Why the approaching flood of vulnerabilities changes everything — and what to do about it image
May 8 2026

Why the approaching flood of vulnerabilities changes everything — and what to do about it

Cloud Security
Supply chain attack on Axios npm package: Scope, impact, and remediations image
Mar 31 2026

Supply chain attack on Axios npm package: Scope, impact, and remediations

Research
The hidden cost of AI speed: Unmanaged cyber risk image
Mar 23 2026

The hidden cost of AI speed: Unmanaged cyber risk

Cloud Security
New Malicious npm Package "ambar-src" Targets Developers with Open Source Malware image
Feb 24 2026

New Malicious npm Package "ambar-src" Targets Developers with Open Source Malware

Research
Dynamic Objects in Active Directory: The Stealthy Threat image
Feb 20 2026

Dynamic Objects in Active Directory: The Stealthy Threat

Learn more about Tenable

Careers

Secure your spot @ Tenable Research

Awards

See why customers trust Tenable

Community

Learn, share, and contribute