Vulnerability Details CVE-2026-13007
Tenable Identity Exposure contains multiple unauthenticated API endpoints under /w/api/* that expose sensitive application configuration data including cleartext LDAP credentials, SAML configuration, user accounts, and directory settings to unauthenticated remote attackers. Affected responses are served with Cache-Control: public headers and without Vary: Cookie, allowing reverse proxies and CDNs to cache and serve sensitive data to unauthenticated users even after authentication is applied.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.006
EPSS Ranking 46.7%
CVSS Severity
CVSS v3 Score 7.5
Products affected by CVE-2026-13007
-
cpe:2.3:a:tenable:identity_exposure:-
-
cpe:2.3:a:tenable:identity_exposure:3.42
-
cpe:2.3:a:tenable:identity_exposure:3.59
-
cpe:2.3:a:tenable:identity_exposure:3.59.4
-
cpe:2.3:a:tenable:identity_exposure:3.77.10
-
cpe:2.3:a:tenable:identity_exposure:3.77.11
-
cpe:2.3:a:tenable:identity_exposure:3.77.12
-
cpe:2.3:a:tenable:identity_exposure:3.77.13
-
cpe:2.3:a:tenable:identity_exposure:3.77.14
-
cpe:2.3:a:tenable:identity_exposure:3.77.15
-
cpe:2.3:a:tenable:identity_exposure:3.77.16
-
cpe:2.3:a:tenable:identity_exposure:3.77.17
-
cpe:2.3:a:tenable:identity_exposure:3.77.3
-
cpe:2.3:a:tenable:identity_exposure:3.77.6
-
cpe:2.3:a:tenable:identity_exposure:3.77.9
-
cpe:2.3:a:tenable:identity_exposure:3.93
-
cpe:2.3:a:tenable:identity_exposure:3.93.2
-
cpe:2.3:a:tenable:identity_exposure:3.93.3
-
cpe:2.3:a:tenable:identity_exposure:3.93.4