CLI 6.35.0
June 23rd, 2026
Changed
- Nessus scan imports now parse every file with a single streaming pass, reducing memory use and speeding up large imports
- Nessus STIG and CIS compliance results now create security checklists and POA&M issues instead of vulnerabilities, and re-scans correctly close remediated compliance POA&Ms without affecting other scanners' findings
Fixed
- SARIF vulnerability import no longer requires Synqly and parses SARIF files directly
- SARIF import now reports accurate created and updated vulnerability counts
- OpenText WebInspect and other JSONL-based scanner imports no longer crash when no scan date is provided, defaulting to the current date instead
- Tanium Cloud vulnerabilities now report Critical severity using CVSS v3 data instead of being capped at High
- Tanium Cloud vulnerability CVSS v2 and v3 base scores are now recorded in their correct fields
Added
- Tanium software bill of materials (SBOM) records in CycloneDX format, generated from endpoint installed applications and linked to each asset during asset synchronization
- Optional source name for Trivy and Grype imports, recorded in scan history and used to group same-day imports
