Vulnerability in Tenable, Inc. Plugin Feed

[ Description ]Official description

On Linux, an authenticated, low-privileged Nessus user with scan-creation rights could read arbitrary text files on the scanner host with the privileges of the nessusd process by running a custom Unix compliance audit against the scanner itself.

[ Fixes ]Fixes and patches

• Security bulletin: Tenable tns-2026-33Vendor patch or bulletin · CERT-FR · tenable.com/security/tns-2026-33, cited by CERT-FR CERTFR-2026-AVI-1425

[ Advisories ]Government CERT advisories

• CERT-FR30 Oct 2026CERTFR-2026-AVI-1425

  Vulnerability in Tenable Nessus Plugin Translated from French

  A vulnerability has been discovered in Tenable Nessus Plugin. It allows an attacker to cause a breach of data confidentiality.

  CVE-2026-119317

[ References ]References

• www.tenable.com/security/tns-2026-33