CVE-2025-24917: Tenable Nessus Network Monitor

High severity, CVSS 7.8. EPSS: 0.2% chance of exploitation in the next 30 days.

In Tenable Network Monitor versions prior to 6.5.1 on a Windows host, it was found that a non-administrative user could stage files in a local directory to run arbitrary code with SYSTEM privileges, potentially leading to local privilege escalation.

Affected products

• Tenable Nessus Network Monitor: before 6.5.1 (fixed in 6.5.1)

Published 2025-05-23. Last modified 2026-06-17.