CVE-2026-13007

High

Description

Tenable Identity Exposure contains multiple unauthenticated API endpoints under /w/api/* that expose sensitive application configuration data including cleartext LDAP credentials, SAML configuration, user accounts, and directory settings to unauthenticated remote attackers. Affected responses are served with Cache-Control: public headers and without Vary: Cookie, allowing reverse proxies and CDNs to cache and serve sensitive data to unauthenticated users even after authentication is applied.

SeverityHigh

CVSS7.5

Exploit probability—

ProductTenable Identity Exposure

PublishedJun 23, 2026

First seenJun 23, 2026

Weakness typeCWE-306Missing authentication for critical function CWE-524CWE-524

How to fix

Update

tenable identity_exposure3.93.5 or later

Vendor advisories

tenable.com/security/research/tns-2026-16

Affected products

Product	Affected versions	Fixed in
tenable identity_exposure	v < 3.93.5	3.93.5

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.