CVE-2026-119317: Tenable, Inc. Plugin Feed: On Linux, an authenticated, low-privileged Nessus user with scan-creation rights could read arbitrary text files on the…

On Linux, an authenticated, low-privileged Nessus user with scan-creation rights could read arbitrary text files on the scanner host with the privileges of the nessusd process by running a custom Unix compliance audit against the scanner itself...

CVE-2022-28291: Insufficiently Protected Credentials

Insufficiently Protected Credentials: An authenticated user with debug privileges can retrieve stored Nessus policy credentials from the “nessusd” process in cleartext via process dumping. The affected products are all versions of Nessus Essentials and Professional. The vulnerability allows an...