Vulnerability in Tenable, Inc. Nessus

[ Description ]Official description

An SQL injection vulnerability could allow an authenticated user to read or modify data stored by Nessus.

[ Fixes ]Fixes and patches

• Security bulletin: Tenable tns-2026-26Vendor patch or bulletin · CERT-FR · tenable.com/security/tns-2026-26, cited by CERT-FR CERTFR-2026-AVI-1247

[ Advisories ]Government CERT advisories

• CERT-FR2 Oct 2026CERTFR-2026-AVI-1247

  Multiple vulnerabilities in Tenable Nessus Translated from French

  Multiple vulnerabilities have been discovered in Tenable Nessus. Some of them allow an attacker to cause remote denial of service, a breach of data confidentiality and a breach of data integrity.

  CVE-2026-103951CVE-2026-103947CVE-2026-103946+6 more CVEs
• BSI CERT-Bund1 Oct 2026WID-SEC-2026-3708

  Tenable Security Nessus: Multiple vulnerabilities Translated from German

  CVE-2026-103952CVE-2026-103947CVE-2026-103951+6 more CVEs

[ References ]References

• www.tenable.com/security/tns-2026-26