Trend Micro, Tanium, ESET and Tenable Patch Severe Product Vulnerabilities

Key Points:

• Multiple cybersecurity firms, including Trend Micro, ESET, Tanium, and Tenable, have released patches for severe vulnerabilities in their products.
• The vulnerabilities include a critical path traversal (CVE-2026-15265) in Tenable Agent allowing remote code execution, high-severity local privilege escalation in ESET's Inspect Connector for Windows, and a high-severity DoS flaw in Tanium Server.
• Organizations using these products are urged to apply the latest updates immediately to mitigate potential exploitation risks.

Technical Details: CVE-2026-15265 allows attackers to exploit a path traversal vulnerability in Tenable Agent for remote code execution. ESET's local privilege escalation vulnerability permits unauthorized access via crafted ALPC requests.

MITRE ATT&CK Techniques:

• T1210 - Exploitation of Remote Services (Initial Access)
• T1068 - Exploit Public-Facing Application (Privilege Escalation)
• T1499 - Endpoint Denial of Service (Impact)

IOCs Mentioned: None mentioned.