CVE-2026-119317
Incorrect Authorization
CVSS Score
6.5
EPSS Score
0.0%
EPSS Percentile
0th
On Linux, an authenticated, low-privileged Nessus user with scan-creation rights could read arbitrary text files on the scanner host with the privileges of the nessusd process by running a custom Unix compliance audit against the scanner itself.
| Vendor | tenable, inc. |
| Product | plugin feed |
| Published | Oct 29, 2026 |
Stay Ahead of the Next One
Get instant alerts for tenable, inc. plugin feed
Be the first to know when new medium vulnerabilities affecting tenable, inc. plugin feed are published — delivered to Slack, Telegram or Discord.
Get Free Alerts →
Free · No credit card · 60 sec setup
CVSS v3 Breakdown
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N Attack Vector
Network
Attack Complexity
Low
Privileges Required
Low
User Interaction
None
Scope
Unchanged
Confidentiality
High
Integrity
None
Availability
None
Affected Versions
Tenable, Inc. / Plugin Feed
0 < 202610282338