Plugins Pipeline

At Tenable, we use a multitude of approaches to deliver the best possible coverage to our customers and use a number of factors to prioritize vulnerabilities. Browse upcoming plugins that the Tenable Research team is prioritizing by CVE, detection status or keyword search. Please note that this page does not represent an exhaustive list of plugins that Tenable Research intends to provide coverage for nor for which plugin coverage is provided.

Plugins are categorized into one of the following detection statuses:

  • Development: Tenable Research team is actively working on providing a detection.
  • Testing: The plugin is in the production build & release pipeline.
  • Released: The plugin has been published on the displayed date.
TitleCVEsUpdatedStatus
ibm 7261761: Security Bulletin: IBM WebSphere Application Server Liberty could provide weaker than expected security (CVE-2025-14923)CVE-2025-149232026/3/3testing
unity_linux UTSA-2026-005389: Unity Linux: resource-agents (UTSA-2026-005389)CVE-2025-664712026/3/3testing
rocky_linux RLSA-2026:3334: RLSA-2026:3334: freerdp security update (Important)CVE-2026-22859, CVE-2026-22858, CVE-2026-228552026/3/3testing
rocky_linux RLSA-2026:3341: RLSA-2026:3341: containernetworking-plugins security update (Important)CVE-2025-61726, CVE-2025-68121, CVE-2025-617292026/3/3testing
miracle_linux AXSA:2026-222:15: AXSA:2026-222:15: kernel-4.18.0-553.107.1.el8_10CVE-2026-23074, CVE-2025-38129, CVE-2025-68800, CVE-2025-38248, CVE-2025-400642026/3/3testing
redhat RHSA-2026:3407: RHSA-2026:3407: mingw-fontconfig security update (Important)CVE-2025-593752026/3/3testing
Update IAVM microsoft_edge 2024_Jul_11: Microsoft Edge Stable Channel (Version 126.0.2592.102)CVE-2024-381562026/3/2development
cisco cisco-sa-apic-dos-rNus8EFw: Cisco Application Policy Infrastructure Controller Denial of Service VulnerabilityCVE-2026-201072026/3/2development
[Web App Scanning] SolarWinds WHD < 2026.1 Authentication BypassCVE-2025-405522026/2/27testing
Zed < 0.224.4 Multiple VulnerabilitiesCVE-2026-27976, CVE-2026-278002026/2/26development
Update Security Update for Veritas NetBackup2026/2/26testing
Solarwinds Serv-U < 15.5.4 Multiple VulnerabiltiesCVE-2025-40538, CVE-2025-40540, CVE-2025-40541, CVE-2025-405392026/2/24development
Update CVE for Security Update for NVIDIA Nsight GraphicsCVE-2025-233552026/2/23testing
[Web App Scanning] TLS 1.3 Not Supported Protocol2026/2/23testing
tenable TNS-2026-07: [R2] Security Center Version 6.8.0 Fixes Multiple VulnerabilitiesCVE-2025-12818, CVE-2026-2698, CVE-2026-2697, CVE-2023-69182026/2/20development
OpenClaw Multiple Vulnerabilities February 20CVE-2026-26327, CVE-2026-27007, CVE-2026-26316, CVE-2026-26326, CVE-2026-26317, CVE-2026-27002, CVE-2026-26322, CVE-2026-27004, CVE-2026-26328, CVE-2026-26323, CVE-2026-27008, CVE-2026-27009, CVE-2026-27003, CVE-2026-26324, CVE-2026-26321, CVE-2026-26329, CVE-2026-26319, CVE-2026-26325, CVE-2026-26972, CVE-2026-27001, CVE-2026-25474, CVE-2026-24764, CVE-2026-263202026/2/20development
[Web App Scanning] Apache Tomcat Multiple VulnerabilitiesCVE-2026-24734, CVE-2025-66614, CVE-2026-247332026/2/19testing
splunk SVD-2026-0202: Risky Commands Safeguards Bypass through preloaded Data Models due to Path Traversal vulnerability in Splunk EnterpriseCVE-2026-201372026/2/18development
Update Version Check for Security Update for Dell iDRAC Service ModuleCVE-2026-238562026/2/18testing
Coverage for CVE-2023-42457CVE-2023-424572026/2/18development
tenable TNS-2026-06: [R2] Stand-alone Security Patches Available for Tenable Security Center versions 6.5.1, 6.6.0 and 6.7.2: SC-202602.1 + SC-202602.2CVE-2025-14819, CVE-2025-15224, CVE-2025-14178, CVE-2025-14177, CVE-2025-15079, CVE-2025-54090, CVE-2025-14017, CVE-2025-14524, CVE-2025-14180, CVE-2025-13034, CVE-2026-26302026/2/18development
Coverage for CVE-2024-0669CVE-2024-06692026/2/13development
Coverage for CVE-2022-23599CVE-2022-235992026/2/13development
apple 122720: About the security content of tvOS 18.5CVE-2025-43374, CVE-2025-59375, CVE-2024-8176, CVE-2025-31234, CVE-2024-55549, CVE-2025-31257, CVE-2025-24224, CVE-2025-31208, CVE-2025-10911, CVE-2025-31238, CVE-2025-31219, CVE-2025-31212, CVE-2025-24223, CVE-2025-31223, CVE-2025-31233, CVE-2025-49796, CVE-2025-31209, CVE-2025-6021, CVE-2025-31245, CVE-2025-31251, CVE-2025-31242, CVE-2025-31204, CVE-2025-11731, CVE-2025-49794, CVE-2025-31221, CVE-2025-31222, CVE-2025-31217, CVE-2025-31206, CVE-2025-31239, CVE-2025-31226, CVE-2025-31241, CVE-2025-31205, CVE-2025-7425, CVE-2025-31215, CVE-2025-36630, CVE-2025-242132026/2/12development
Microsoft Windows Defender for LinuxCVE-2026-215372026/2/12development
Gogs <= 0.13.3 Multiple VulnerabilitiesCVE-2026-23633, CVE-2025-65852, CVE-2026-23632, CVE-2026-22592, CVE-2025-64111, CVE-2026-24135, CVE-2025-641752026/2/11testing
Security Advisory for Zyxel ProductsCVE-2025-117302026/2/11development
Security Update for QEMUCVE-2026-06652026/2/10development
microsoft_bulletins 2026-Feb_server_software: Microsoft Exchange ServerCVE-2026-215272026/2/10development
Multiple Vulnerabilities in Notepad++ (CVE-2025-56383)CVE-2025-15556, CVE-2025-563832026/2/5development
Sangoma FreePBX Improper Authentication Vulnerability (CVE-2019-19006)CVE-2019-190062026/2/4development
cisco cisco-sa-iec6400-Pem5uQ7v: Cisco IEC6400 Wireless Backhaul Edge Compute Software SSH Denial of Service VulnerabilityCVE-2026-200802026/2/3development
Multiple Vulnerabilities in SolarWinds Web Help DeskCVE-2025-40551, CVE-2025-40537, CVE-2025-40552, CVE-2025-405362026/1/30development
Security Update for WiresharkCVE-2026-09622026/1/22development
oracle_linux ELSA-2026-0936: ELSA-2026-0936: glib2 security update (MODERATE)CVE-2025-136012026/1/22development
oracle_linux ELSA-2026-0975: ELSA-2026-0975: glib2 security update (MODERATE)CVE-2025-136012026/1/22development
oracle_linux ELSA-2026-0930: ELSA-2026-0930: pcs security update (MODERATE)CVE-2025-67726, CVE-2025-677252026/1/22development
oracle CPUJan2026: Business Intelligence Enterprise EditionCVE-2025-8885, CVE-2025-26333, CVE-2025-66418, CVE-2024-57699, CVE-2025-48734, CVE-2025-9230, CVE-2025-59419, CVE-2025-41249, CVE-2025-55039, CVE-2026-21976, CVE-2023-6378, CVE-2021-23926, CVE-2025-48924, CVE-2025-68161, CVE-2024-35195, CVE-2025-31672, CVE-2025-52999, CVE-2024-47554, CVE-2025-48976, CVE-2022-45047, CVE-2025-59250, CVE-2025-587542026/1/20development
oracle CPUJan2026: MySQL Server 8.4.8CVE-2025-6965, CVE-2026-21941, CVE-2026-21964, CVE-2026-21937, CVE-2026-21948, CVE-2025-9230, CVE-2026-21968, CVE-2026-219362026/1/20development
oracle CPUJan2026: MySQL Cluster 8.4.8CVE-2025-6965, CVE-2026-21941, CVE-2026-21964, CVE-2026-21937, CVE-2026-21948, CVE-2025-9230, CVE-2026-21968, CVE-2026-219362026/1/20development
oracle CPUJan2026: MySQL Cluster 8.0.45CVE-2026-21941, CVE-2026-21964, CVE-2026-21937, CVE-2026-21948, CVE-2025-9230, CVE-2026-21968, CVE-2026-219362026/1/20development
oracle CPUJan2026: MySQL Server 8.0.45CVE-2026-21941, CVE-2026-21964, CVE-2026-21937, CVE-2026-21948, CVE-2025-9230, CVE-2026-21968, CVE-2026-219362026/1/20development
oracle CPUJan2026: MySQL Cluster 7.6.37CVE-2026-219362026/1/20development
Windows SDK Inbox COM Objects (Global Memory) Remote Code Execution VulnerabilityCVE-2026-212192026/1/13development
IBM API Connect Auth BypassCVE-2025-139152026/1/8development
oracle_linux ELSA-2025-23295: ELSA-2025-23295: podman security update (MODERATE)CVE-2025-581832025/12/19development
Motex LANSCOPE Endpoint Manager Improper Verification of Source of a Communication Channel Vulnerability (CVE-2025-61932)CVE-2025-619322025/11/18development