Multiple Security Vendors Patch Product Vulnerabilities

Summary

Trend Micro, ESET, Tenable, Tanium and Palo Alto Networks issued patches for product vulnerabilities, including a Tenable Agent path traversal that may enable remote code execution. The article says there is no evidence of exploitation for the latest flaws.

Key points

Tenable patched critical path traversal vulnerability CVE-2026-15265 in Tenable Agent; it may allow remote code execution.
ESET patched a high-severity local privilege escalation flaw in Inspect Connector for Windows involving unauthenticated ALPC requests.
ESET also issued an advisory for a medium-severity denial-of-service vulnerability in its Linux security products.
Tanium patched a high-severity Tanium Server denial-of-service flaw that could be triggered by an unauthenticated network attacker.
Trend Micro said a medium-severity Cleaner One Pro flaw could allow a malicious app running locally to delete files; remote exploitation is not possible.
Palo Alto Networks patched more than a dozen product vulnerabilities. The article reports no evidence of exploitation for the latest vulnerabilities, while noting previous in-the-wild exploitation confirmed by Palo Alto Networks and Trend Micro.

Article Details

Event Type: Cybersecurity vendors released product updates addressing vulnerabilities.
Impact: The reported flaws affect the Tenable Agent, ESET Inspect Connector for Windows, ESET security products for Linux, Tanium Server, and Trend Micro Cleaner One Pro. Potential impacts include remote code execution, local privilege escalation, denial of service, and arbitrary file deletion. The vendors reported that patches or fixes were available; the article states there was no evidence of exploitation of these latest vulnerabilities.