CVE-2025-24914: Tenable Nessus

High severity, CVSS 7.8. EPSS: 0.2% chance of exploitation in the next 30 days.

When installing Nessus to a non-default location on a Windows host, Nessus versions prior to 10.8.4 did not enforce secure permissions for sub-directories. This could allow for local privilege escalation if users had not secured the directories in the non-default installation location. - CVE-2025-24914

Affected products

• Tenable Nessus: before 10.8.4 (fixed in 10.8.4)

Published 2025-04-18. Last modified 2026-06-17.