Trend Micro, Tanium, ESET, and Tenable Patch Critical Vulnerabilities

Overview of Vulnerability Patches

Cybersecurity companies Trend Micro, ESET, Tanium, and Tenable recently released updates to address severe vulnerabilities in their products. These patches are critical for maintaining security and preventing potential exploitation by attackers.

Tenable's Fixes

Tenable informed its customers about a critical-severity path traversal vulnerability, tracked as CVE-2026-15265, affecting the Tenable Agent. This vulnerability could allow attackers to perform remote code execution, presenting a significant risk if not addressed.

ESET's Security Updates

ESET announced a high-severity local privilege escalation vulnerability in its Inspect Connector for Windows. This vulnerability allows an attacker to send crafted ALPC requests that could be processed improperly, granting access to restricted functionalities. ESET has also published a separate advisory for a medium-severity DoS vulnerability in its Linux security products.

Tanium's Denial of Service Vulnerability

Tanium disclosed a high-severity DoS flaw in the Tanium Server, which could be exploited by unauthenticated attackers to execute denial of service attacks, jeopardizing server availability.

Trend Micro's Vulnerabilities

Trend Micro patched a high-severity local privilege escalation vulnerability in Cleaner One Pro. If exploited, this could enable attackers to delete crucial Trend Micro files, risking customers' systems and data integrity.

Context and Implications

While there is currently no evidence of these vulnerabilities being exploited, cybersecurity products are often targeted by attackers. Recent incidents have shown that vulnerabilities in security tools themselves can lead to compromising scenarios, highlighting the importance of timely patches.