CVE-2026-2697

2.1 lowEPSS 0.2%

Low (2.1) in tenable security center. EPSS 0.2% chance of exploitation in the next 30 days.

An Indirect Object Reference (IDOR) in Security Center allows an authenticated remote attacker to escalate privileges via the 'owner' parameter.

Severity

2.1 low

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P

8.8 high

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

EPSS: 0.2% chance of exploitation in the next 30 days; higher than 14% of CVEs (scores of 2026-10-31)
CWE: CWE-639
Published: 2026-02-23
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19