CVE-2023-5623: Tenable Nessus Network Monitor
High severity, CVSS 7.8. EPSS: 0.2% chance of exploitation in the next 30 days.
NNM failed to properly set ACLs on its installation directory, which could allow a low privileged user to run arbitrary code with SYSTEM privileges where NNM is installed to a non-standard location
Affected products
- Tenable Nessus Network Monitor: before 6.3.0 (fixed in 6.3.0)
Published 2023-10-26. Last modified 2026-06-17.