Tenable Nessus vulnerabilities
19 published CVEs name Tenable Nessus among the affected products.
- 19Published CVEs19 of them scored
- 2Last 12 monthspublished in the last year
- 0Critical7 more rated high
- 0Known exploitedin CISA's KEV catalog
Newest CVEs
- CVE-2026-57588
SQL Injection in Nessus via Malicious Scan Result File Import
tenable · Nessus
Low1.6 - CVE-2026-57587
SQL Injection in Nessus via Reverse DNS Lookup
tenable · Nessus
Low2.1 - CVE-2025-36630
Local Privilege Escalation
Tenable · Nessus
High8.4 - CVE-2025-36625
Log Poisoning in Nessus
Tenable · Nessus
Medium4.3 - CVE-2025-24914
Local Priviledge Escalation
Tenable · Nessus
High7.8 - CVE-2024-3290
Race Condition
Tenable · Nessus
High8.2 - CVE-2024-3289
When installing Nessus to a directory outside of the default location on a Windows host, Nessus versions prior to 10.7.3 did not enforce secure permissions for…
Tenable · Nessus
High7.8 - CVE-2024-2390
Local Privilege Escalation
Tenable · Nessus Agent
High7.8 - CVE-2024-0971
A SQL injection vulnerability exists where an authenticated, low-privileged remote attacker could potentially alter scan DB content.
Tenable · Nessus
Medium6.5 - CVE-2024-0955
Stored XSS vulnerability
Tenable · Nessus
Medium4.8