Approved changes feed: RSS · Atom

cpe:2.3:a:tenable:nessus_agent:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorTenable (c0ec4e71-d667-5327-b3ed-b4c21aa5a87e)
ProductNessus Agent (fbe6e236-9d1b-5046-8c83-d4f253ce8322)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2026-2026 vulnerable 2026-06-08 07:55:16.403939 Improper Access Control Allows Denial of Service
MEDIUM (6.1)
A vulnerability has been identified where weak file permissions in the Nessus Agent directory on Windows hosts could allow unauthorized access, potentially permitting Denial of Service (DoS) attacks.
Published: 2026-02-13T16:14:23.789Z
Updated: 2026-02-13T16:58:59.807Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-36640 vulnerable 2026-06-08 07:21:02.130375 Local Privilege Escalation
HIGH (8.8)
A vulnerability has been identified in the installation/uninstallation of the Nessus Agent Tray App on Windows Hosts which could lead to escalation of privileges.
Published: 2026-01-13T15:05:19.918Z
Updated: 2026-02-26T15:04:45.524Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-36633 vulnerable 2026-06-08 07:21:02.126997 Local Privilege Escalation
HIGH (8.8)
In Tenable Agent versions prior to 10.8.5 on a Windows host, it was found that a non-administrative user could arbitrarily delete local system files with SYSTEM privilege, potentially leading to local privilege escalation.
Published: 2025-06-13T14:21:04.431Z
Updated: 2026-02-26T17:50:37.625Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-36632 vulnerable 2026-06-08 07:21:02.126413 Local Privilege Escalation
HIGH (7.8)
In Tenable Agent versions prior to 10.8.5 on a Windows host, it was found that a non-administrative user could execute code with SYSTEM privilege.
Published: 2025-06-16T13:56:23.618Z
Updated: 2025-06-16T14:19:22.891Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-36631 vulnerable 2026-06-08 07:21:02.125858 Local Privilege Escalation
HIGH (8.4)
In Tenable Agent versions prior to 10.8.5 on a Windows host, it was found that a non-administrative user could overwrite arbitrary local system files with log content at SYSTEM privilege.
Published: 2025-06-13T14:34:52.991Z
Updated: 2025-06-13T14:51:57.526Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-24915 vulnerable 2026-06-08 07:12:50.166147 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-3292 vulnerable 2026-06-08 06:41:52.894336 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-3291 vulnerable 2026-06-08 06:41:52.893908 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-2390 vulnerable 2026-06-08 06:33:30.996898 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-6178 vulnerable 2026-06-08 06:19:46.496317 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-5847 vulnerable 2026-06-08 06:19:44.907342 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-3450 vulnerable 2026-06-08 05:33:52.212268 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-20118 vulnerable 2026-06-08 05:29:08.553534 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-20117 vulnerable 2026-06-08 05:29:08.553257 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-20077 vulnerable 2026-06-08 05:29:08.203752 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-16168 vulnerable 2026-06-08 05:13:07.848042 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.