[R2] Stand-alone Security Patch Available for SC Versions 6.6.4, 6.7.5 and 6.8.0 on Tenable Enclave Security: SC202607.2
CVE-2026-64877CVE-2026-64878CVE-2026-64879+1sqli
[R2] Stand-alone Security Patch Available for SC Versions 6.6.4, 6.7.5 and 6.8.0 on Tenable Enclave Security: SC202607.2 Jason Schavel Fri, 07/31/2026 - 13:00 Security Center on Tenable Enclave Security leverages third-party software to help provide underlying functionality. Several of the third-party components (apache, OpenSSL, postgreSQL, PHP, redis) were found to contain vulnerabilities, and updated versions have been made available by the providers. Out of caution and in line with best practice, Tenable has opted to upgrade these libraries to address the potential impact of the issues. Security Center Patch SC202607.2 updates the following components:postgresql to version 16.14Apache to version 2.4.67OpenSSL to version 3.5.4PHP to version 8.2.31GO to version 1.26.5redis to version 8.2.6 (6.7.x and 6.8.0 only)Additionally, several vulnerabilities were reported to Tenable and addressed within this patch. Please see the full list of resolved issues below.ComponentCVE IDSeverityCVSS Base v3 CVSS v3 Temporal CVSS v3 VectorSecurity Center - SQL InjectionCVE-2026-64877 High8.47.6CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:N/E:P/RL:U/RC:CSecurity Center - Command InjectionCVE-2026-64878 Critical9.98.9CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:P/RL:O/RC:CSecurity Center - Command InjectionCVE-2026-64879 Critical9.98.9CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:P/RL:O/RC:CSecurity Center - Blind SQL InjectionCVE-2026-64880 High7.17.1CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A