← Vulnerability feed

Vulnerability record · CVE-2026-15265 · published 14 July 2026

CVE-2026-15265: Tenable nessus agent path traversal vulnerability

Tenable · Nessus Agent

A path traversal vulnerability in Tenable Agent 11.2.0 and 11.1.3 and lower allows a privileged attacker to write arbitrary files outside the intended plugin directory, potentially leading to remote code execution.

9.4 CVSS 4.0 Critical EPSS 0.56% · top 55.8% CWE-22 · Path traversalCWE-347 · Improper verification of cryptographic signature
9.4CVSS 4.0 base score
0.56%EPSS exploitation probability, 30 days
NoNot in CISA KEV
1Affected product versions listed by NVD
1References
25 Aug 2026Last modified by NVD

Description

A path traversal vulnerability in Tenable Agent 11.2.0 and 11.1.3 and lower allows a privileged attacker to write arbitrary files outside the intended plugin directory, potentially leading to remote code execution.

CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:

Affected products

1 vulnerable configurations from NVD's CPE data, grouped by vendor and product.

References

LinkTags
https://www.tenable.com/security/tns-2026-18 Third Party Advisory

Track CVE-2026-15265 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Related vulnerabilities

Same products first, then exploited flaws of the same weakness class.

7.8CVE-2025-36632Tenable nessus agent incorrect default permissions vulnerabilityIn Tenable Agent versions prior to 10.8.5 on a Windows host, it was found that a non-administrative user could execute code with SYSTEM privilege.EPSS 0.20%7.8CVE-2025-36633Tenable nessus agent improper privilege management vulnerabilityIn Tenable Agent versions prior to 10.8.5 on a Windows host, it was found that a non-administrative user could arbitrarily delete local system files …EPSS 0.18%7.8CVE-2025-36631Tenable nessus agent improper privilege management vulnerabilityIn Tenable Agent versions prior to 10.8.5 on a Windows host, it was found that a non-administrative user could overwrite arbitrary local system files…EPSS 0.17%7.8CVE-2020-5793Tenable nessus vulnerabilityA vulnerability in Nessus versions 8.9.0 through 8.12.0 for Windows & Nessus Agent 8.0.0 and 8.1.0 for Windows could allow an authenticated local att…EPSS 0.40%7.4CVE-2026-33694Tenable nessus link following vulnerabilityThis vulnerability allows an attacker to create a junction, enabling the deletion of arbitrary files with SYSTEM privileges. As a result, this condit…EPSS 0.20%7.4CVE-2021-3450Openssl improper certificate validation vulnerabilityThe X509_V_FLAG_X509_STRICT flag enables additional security checks of the certificates present in a certificate chain. It is not set by default. Sta…EPSS 18%7.3CVE-2023-5847Tenable nessus improper privilege management vulnerabilityUnder certain conditions, a low privileged attacker could load a specially crafted file during installation or upgrade to escalate privileges on Wind…EPSS 0.22%6.7CVE-2021-20118Tenable nessus agent vulnerabilityNessus Agent 8.3.0 and earlier was found to contain a local privilege escalation vulnerability which could allow an authenticated, local administrato…EPSS 0.30%

Source: NIST National Vulnerability Database (record CVE-2026-15265), CISA KEV, FIRST EPSS (scores of 2026-09-26). This page is refreshed as NVD updates the record.