CVE-2025-36631

In Tenable Agent versions prior to 10.8.5 on a Windows host, it was found that a non-administrative user could overwrite arbitrary local system files with log content at SYSTEM privilege...

CVE-2025-36631

In Tenable Agent versions prior to 10.8.5 on a Windows host, it was found that a non-administrative user could overwrite arbitrary local system files with log content at SYSTEM privilege...

CVE-2025-36631

CVE-2025-36631 affects Tenable Agent on Windows before version 10.8.5, where a non-administrative user could overwrite arbitrary local system files with content written to logs, executing with SYSTEM privileges (local privilege escalation). The issue is confirmed across multiple sources in the co...

CVE-2025-36631 Local Privilege Escalation

In Tenable Agent versions prior to 10.8.5 on a Windows host, it was found that a non-administrative user could overwrite arbitrary local system files with log content at SYSTEM privilege...

CVE-2025-36631 Local Privilege Escalation

In Tenable Agent versions prior to 10.8.5 on a Windows host, it was found that a non-administrative user could overwrite arbitrary local system files with log content at SYSTEM privilege...

CVE-2025-36633 Local Privilege Escalation

In Tenable Agent versions prior to 10.8.5 on a Windows host, it was found that a non-administrative user could arbitrarily delete local system files with SYSTEM privilege, potentially leading to local privilege escalation...

CVE-2025-36633 Local Privilege Escalation

In Tenable Agent versions prior to 10.8.5 on a Windows host, it was found that a non-administrative user could arbitrarily delete local system files with SYSTEM privilege, potentially leading to local privilege escalation...

CVE-2025-36633

CVE-2025-36633 affects Tenable Agent on Windows prior to version 10.8.5. A non-administrative user could delete local system files with SYSTEM privileges, enabling local privilege escalation. The issue is documented across multiple feeds (NVD, Red Hat, CNVD, PT Security, etc.). The remediation co...

Tenable Agent 安全漏洞

Tenable Agent is a vulnerability scanning program from Tenable USA. Tenable Agent has an elevation of privilege vulnerability, which originates from a non-administrative user deleting arbitrary local system files with SYSTEM privileges, and can be exploited by an attacker to tamper with the syste...

Tenable Agent 安全漏洞

Tenable Agent is a vulnerability scanning program from Tenable USA. Tenable Agent suffers from a security vulnerability that originates from a non-administrative user being able to overwrite arbitrary local system files with SYSTEM privileges. No details of the vulnerability are provided at this...

PT-2025-25418 · Tenable · Tenable Agent

Name of the Vulnerable Software and Affected Versions: Tenable Agent versions prior to 10.8.5 Description: A non-administrative user could overwrite arbitrary local system files with log content at SYSTEM privilege on a Windows host. Recommendations: For Tenable Agent versions prior to 10.8.5,...

PT-2025-25419 · Tenable · Tenable Agent

Name of the Vulnerable Software and Affected Versions: Tenable Agent versions prior to 10.8.5 Description: A non-administrative user could arbitrarily delete local system files with SYSTEM privilege, potentially leading to local privilege escalation on a Windows host. Recommendations: For Tenable...

Tenable Nessus Agent < 10.8.5 Multiple Vulnerabilities (TNS-2025-11) (Windows)

According to its self-reported version, the Tenable Nessus Agent running on the remote Windows host is prior to 10.8.5. It is, therefore, affected by multiple vulnerabilities as referenced in the TNS-2025-11 advisory. - In Tenable Agent versions prior to 10.8.5 on a Windows host, it was found tha...

Amazon Linux 2023 : aspnetcore-runtime-8.0, aspnetcore-runtime-dbg-8.0, aspnetcore-targeting-pack-8.0 (ALAS2023-2025-1008)

It is, therefore, affected by a vulnerability as referenced in the ALAS2023-2025-1008 advisory. External control of file name or path in .NET, Visual Studio, and Build Tools for Visual Studio allows an authorized attacker to perform spoofing over a network. CVE-2025-26646 Tenable has extracted th...

Tenable Network Monitor Elevation of Privilege Vulnerability

Tenable Network Monitor is an open source system vulnerability scanner developed by Tenable Inc. in the United States, mainly used for network vulnerability scanning and security assessment. Tenable Network Monitor suffers from an elevation of privilege vulnerability, which stems from improperly...

Tenable Network Monitor Elevation of Privilege Vulnerability

Tenable Network Monitor is an open source system vulnerability scanner developed by Tenable Holdings, Inc. in the United States, mainly used for security assessment of network devices. Tenable Network Monitor suffers from an elevation of privilege vulnerability that originates from a...

RHEL 10 : git (RHSA-2025:7482)

The remote Redhat Enterprise Linux 10 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2025:7482 advisory. Git is a distributed revision control system with a decentralized architecture. As opposed to centralized version control systems with a client-serv...

AlmaLinux 9 : nodejs:20 (ALSA-2025:8468)

The remote AlmaLinux 9 host has packages installed that are affected by a vulnerability as referenced in the ALSA-2025:8468 advisory. nodejs: Remote Crash via SignTraits::DeriveBits in Node.js CVE-2025-23166 Tenable has extracted the preceding description block directly from the AlmaLinux securit...

Slackware Linux 15.0 / current python3 Multiple Vulnerabilities (SSA:2025-155-02)

The version of python3 installed on the remote host is prior to 3.12.11 / 3.9.23. It is, therefore, affected by multiple vulnerabilities as referenced in the SSA:2025-155-02 advisory. New python3 packages are available for Slackware 15.0 and -current to fix security issues. Tenable has extracted...

Oracle Linux 9 : nodejs:20 (ELSA-2025-8468)

The remote Oracle Linux 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2025-8468 advisory. nodejs 1:20.19.2-1 - Update to version 20.19.2 Resolves: RHEL-92865 RHEL-88876 RHEL-91597 nodejs-nodemon nodejs-packaging Tenable has extracted the preceding...