Cpe:2.3:a:tenable:nessus_plugin:*:*:*:*:*:*:*:* - CraftedSignal Threat Feedhttps://feed.craftedsignal.io/cpes/cpe2.3atenablenessus_plugin/Trending threats, MITRE ATT&CK coverage, and detection metadata. Fed continuously.Hugoenhello@craftedsignal.iohello@craftedsignal.ioSun, 01 Nov 2026 02:44:54 +0000https://feed.craftedsignal.io/favicon-32x32.pngCraftedSignal Threat Feedhttps://feed.craftedsignal.io/3232https://feed.craftedsignal.io/favicon.svgTenable Nessus Plugin: Data Confidentiality Vulnerability (CVE-2026-119317)https://feed.craftedsignal.io/briefs/2026-11-nessus-plugin-vulnerability/Sun, 01 Nov 2026 02:44:54 +0000hello@craftedsignal.iohttps://feed.craftedsignal.io/briefs/2026-11-nessus-plugin-vulnerability/A vulnerability in Tenable Nessus Plugin versions prior to #202610282338 allows an attacker to compromise data confidentiality, as detailed in Tenable security bulletin tns-2026-33.Tenable has released a security update to address a vulnerability in the Nessus Plugin. The flaw, tracked as CVE-2026-119317, allows an attacker to compromise the confidentiality of data processed or accessed by the plugin. Organizations using Tenable Nessus are advised to update their plugin sets to version #202610282338 or later.

Impact

Successful exploitation of this vulnerability results in an unauthorized disclosure of information (compromise of data confidentiality). The specific nature of the exposed data depends on the configuration and environment in which the Nessus scanner is deployed.

Recommendation

Update the Tenable Nessus Plugin set to version #202610282338 or higher immediately to mitigate the risk posed by CVE-2026-119317. Verify the plugin set version via the Nessus administration console or the Tenable vulnerability management platform.

]]>lowadvisory