CVE-2021-20076: Tenable Tenable.sc

High severity, CVSS 8.8. EPSS: 2.1% chance of exploitation in the next 30 days.

Tenable.sc and Tenable.sc Core versions 5.13.0 through 5.17.0 were found to contain a vulnerability that could allow an authenticated, unprivileged user to perform Remote Code Execution (RCE) on the Tenable.sc server via Hypertext Preprocessor unserialization.

Affected products

• Tenable Tenable.sc: from 5.13.0, up to and including 5.17.0

Published 2021-03-03. Last modified 2026-06-17.