CVE-2025-0760: Tenable Identity Exposure

Low severity, CVSS 2.7. EPSS: 0.2% chance of exploitation in the next 30 days.

A Credential Disclosure vulnerability exists where an administrator could extract the stored SMTP account credentials due to lack of encryption.

Affected products

• Tenable Tenable Identity Exposure: before 3.77.9 (fixed in 3.77.9)

Published 2025-02-26. Last modified 2026-06-17.