Live › vulnerability › CVE-2026-119317
On Linux, a Nessus user with scan-creation rights can run a custom Unix compliance audit against the scanner itself and read arbitrary text files on the host. The reads run with the privileges of the nessusd process, so the attacker gets local file contents the account should not see.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-29 22:27 UTC. All times on this page are UTC.
Teams running Tenable Nessus on Linux where some users have scan-creation rights. The exposure depends on whether those users can author or run custom Unix compliance audits that target the scanner host. Installations on other operating systems, or where scan creation is restricted to trusted admins, are less exposed; the sources do not say which versions are affected.
No product ranges from the sources yet.
No fix yet, per the sources.
Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
On Linux, an authenticated, low-privileged Nessus user with scan-creation rights could read arbitrary text files on the scanner host with the privileges of the nessusd process by running a custom Unix compliance audit against the scanner itself.
This page as .md · .json · in your agent: get_signal("CVE-2026-119317")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.