CVE-2026-106126

Summary

This vulnerability allows an authenticated, low-privileged attacker to execute arbitrary commands as SYSTEM on the PDCe by injecting commands into the Active Directory Events Listener of Tenable Identity Exposure (SaaS).

Exploitability

Exploitation is relatively straightforward given an authenticated session, but requires the attacker to have low-level privileges.

Blast radius

If exploited, the attacker could gain full control over the PDCe, leading to severe system compromise.

Detection

No reliable host or network indicator is derivable from the published description.

Prioritized remediation

Disable the Active Directory Events Listener feature or upgrade to the latest version of Tenable Identity Exposure (SaaS) as soon as possible.

Analysis generated locally by qwen2.5:7b-instruct (no data left the box). AI-assisted — verify against primary sources before acting.