Tenable Nessus Plugin: Data Confidentiality Vulnerability (CVE-2026-119317)
A vulnerability in Tenable Nessus Plugin versions prior to #202610282338 allows an attacker to compromise data confidentiality, as detailed in Tenable security bulletin tns-2026-33.
CVE search metadata
CVE search record: CVE-2026-119317. Severity: medium. CVSS: 6.5. EPSS: 0.20%. KEV: no. Product: Nessus Plugin (< #202610282338). Brief: Tenable Nessus Plugin: Data Confidentiality Vulnerability (CVE-2026-119317). Brief link: https://feed.craftedsignal.io/briefs/2026-11-nessus-plugin-vulnerability/
Triage facts
Revision 1- Applicability
- Nessus Plugin (< #202610282338)
- Evidence
- Unknown
- Severity
- Low
- Action
- Elevated
- Sources
- 3 public sources
- Freshness
- Revision 1Nov 1, 02:44 UTC
- Vulnerabilities
- 1 CVE
- Source quality
- A1Likely
Tenable has released a security update to address a vulnerability in the Nessus Plugin. The flaw, tracked as CVE-2026-119317, allows an attacker to compromise the confidentiality of data processed or accessed by the plugin. Organizations using Tenable Nessus are advised to update their plugin sets to version #202610282338 or later.
Impact
Successful exploitation of this vulnerability results in an unauthorized disclosure of information (compromise of data confidentiality). The specific nature of the exposed data depends on the configuration and environment in which the Nessus scanner is deployed.
Recommendation
Update the Tenable Nessus Plugin set to version #202610282338 or higher immediately to mitigate the risk posed by CVE-2026-119317. Verify the plugin set version via the Nessus administration console or the Tenable vulnerability management platform.
Mitigations
Update Tenable Nessus Plugin to version #202610282338 or later
CVE-2026-119317