CVE-2026-2026: Tenable Nessus Agent

Medium severity, CVSS 6.1. EPSS: 0.1% chance of exploitation in the next 30 days.

A vulnerability has been identified where weak file permissions in the Nessus Agent directory on Windows hosts could allow unauthorized access, potentially permitting Denial of Service (DoS) attacks.

Affected products

• Tenable Nessus Agent: before 11.0.4 (fixed in 11.0.4); from 11.1.0, before 11.1.2 (fixed in 11.1.2)

Published 2026-02-13. Last modified 2026-06-17.