Description
An Indirect Object Reference (IDOR) in Security Center allows an authenticated remote attacker to escalate privileges via the 'owner' parameter.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Tenable | Security Center | < 6.8.0 | 6.8.0 |
Medium · 6.3
CVE-2026-2697
EUVD-2026-7387GHSA-6pjc-995p-mh58
Indirect Object Reference (IDOR) in Security Center
Published Feb 23, 2026 · Updated Feb 26, 2026 · Assigned by tenable