时间线Tenable Security Advisories
[R1] Nessus Version 10.12.5 Fixes Multiple Vulnerabilities
CVE-2026-103946CVE-2026-103947CVE-2026-103948CVE-2026-103950sqli
[R1] Nessus Version 10.12.5 Fixes Multiple Vulnerabilities Arnie Cabral Thu, 10/01/2026 - 14:31 Several vulnerabilities have been identified, reported to Tenable and resolved. Please see the full list of resolved issues below.IssueCVE ID Severity CVSS v3 Base/TemporalCVSS v3 VectorAn SQL injection vulnerability could allow an authenticated user to read or modify data stored by Nessus.CVE-2026-103946High8.3 / 7.7CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:L/E:F/RL:O/RC:CNessus did not sufficiently verify the integrity of certain downloaded content before using it, which could allow an authenticated, privileged attacker to compromise the system.CVE-2026-103947Critical9.1 / 8.4CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H/E:F/RL:O/RC:CImproper handling of inconsistent length values could allow an authenticated, privileged attacker to compromise the confidentiality, integrity or availability of Nessus.CVE-2026-103948High7.2 / 6.7CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:F/RL:O/RC:CA type confusion vulnerability could allow an authenticated, privileged attacker to compromise the confidentiality, integrity or availability of Nessus.CVE-2026-103950High7.2 / 6.7CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:F/RL:O/RC:CAn out-of-bounds write vulnerability could allow an authenticated, privileged attacker to compromise the confidentiality, integrity or availability of Nessus.CVE-2026-103951High7.2 / 6.7CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:F/RL:O/RC:CAn out-of-bounds write