CVE-2023-5623: Tenable Nessus Network Monitor

High severity, CVSS 7.8. EPSS: 0.2% chance of exploitation in the next 30 days.

NNM failed to properly set ACLs on its installation directory, which could allow a low privileged user to run arbitrary code with SYSTEM privileges where NNM is installed to a non-standard location

Affected products

  • Tenable Nessus Network Monitor: before 6.3.0 (fixed in 6.3.0)

Published 2023-10-26. Last modified 2026-06-17.