CERT-FR: Tenable Nessus Plugin vulnerability (CVE-2026-119317) allows data confidentiality breach, fixed per tns-2026-33
The French CERT-FR published advisory CERTFR-2026-AVI-1425 about a vulnerability in the Tenable Nessus Plugin. According to the advisory, an attacker could exploit the flaw to breach data confidentiality. The issue is tracked as CVE-2026-119317 and addressed in Tenable security bulletin tns-2026-33 of 28 October 2026. The advisory does not mention exploitation in the wild.
Entenda a falha
A vulnerabilidade
CVE-2026-119317 is a vulnerability in the Tenable Nessus Plugin that, per CERT-FR advisory CERTFR-2026-AVI-1425, lets an attacker breach data confidentiality. Versions prior to #202610282338 are affected, and the fix is in that version or later, as described in Tenable bulletin tns-2026-33 of 28 October 2026. The advisory gives no CVSS score, attack vector, authentication requirement or exploitation conditions, and does not mention exploitation in the wild.
Como funciona
The sources do not describe how the vulnerable process works. They say only that the flaw lets an attacker cause a data confidentiality breach in the Nessus Plugin. The affected component, the input involved and the step where it fails are not stated.
Por que é vulnerável
The articles do not state the root cause, why the flaw went unnoticed or what the fix changes. Defenders should read Tenable bulletin tns-2026-33 for those details.
Como foi descoberta
The articles do not say who found the flaw or how. CERT-FR published its advisory on 30 October 2026, pointing to Tenable's bulletin tns-2026-33 of 28 October 2026 and to the CVE record for CVE-2026-119317. The advisory does not mention exploitation in the wild.
Explicação gerada por IA a partir da matéria e dos artigos, em 02/11/2026 12:29.
Detalhes técnicos
- Affected: Nessus Plugin versions prior to #202610282338.
- Impact: data confidentiality breach.
- The advisory gives no CVSS score, attack vector or exploitation conditions.
Remediação
- Apply the fixes described in Tenable bulletin tns-2026-33 (https://www.tenable.com/security/tns-2026-33), i.e. update the Nessus Plugin to version #202610282338 or later.
Linha do tempo
-
CERT-FR: Tenable Nessus Plugin vulnerability (CVE-2026-119317) allows data confidentiality breach, fixed per tns-2026-33
ler a análise desta fonte ocultar
The French CERT-FR published advisory CERTFR-2026-AVI-1425 about a vulnerability in the Tenable Nessus Plugin. According to the advisory, an attacker could exploit the flaw to breach data confidentiality. The issue is tracked as CVE-2026-119317 and addressed in Tenable security bulletin tns-2026-33 of 28 October 2026. The advisory does not mention exploitation in the wild.
Technical Details
- Affected: Nessus Plugin versions prior to #202610282338.
- Impact: data confidentiality breach.
- The advisory gives no CVSS score, attack vector or exploitation conditions.
Remediation
- Apply the fixes described in Tenable bulletin tns-2026-33 (https://www.tenable.com/security/tns-2026-33), i.e. update the Nessus Plugin to version #202610282338 or later.