Recherche « tenable Nessus »
4 CVE
-
CVE-2026-103946 8.3 Élevée
Tenable, Inc. Nessus
An SQL injection vulnerability could allow an authenticated user to read or modify data stored by Nessus.
-
CVE-2026-15265 9.1 Critique
tenable_agent · Tenable nessus agent
A path traversal vulnerability in Tenable Agent 11.2.0 and 11.1.3 and lower allows a privileged attacker to write arbitrary files outside the intended plugin directory, potentially leading to remote code execution.
-
CVE-2026-57588 3.3 Faible
tenable Nessus
A SQL injection vulnerability in Nessus allows an attacker to craft a malicious scan result file that, when imported by a privileged user, injects malicious SQL into the scan results database, potentially enabling exfiltration of scan-result data.
-
CVE-2026-57587 5.3 Moyenne
tenable Nessus
A SQL injection vulnerability in Nessus allows a remote, unauthenticated attacker who controls reverse DNS records for a scanned host to inject malicious SQL into the scan results database, potentially enabling exfiltration of scan-result data.