7.4Yüksek
CVE-2026-33694Junction File Manipulation
Açıklama
This vulnerability allows an attacker to create a junction, enabling the deletion of arbitrary files with SYSTEM privileges. As a result, this condition potentially facilitates arbitrary code execution, whereby an attacker may exploit the vulnerability to execute malicious code with elevated SYSTEM privileges.
Zayıflık türü (CWE):
CWE-59
Veri: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Bilgiler kaynaktaki haliyle, İngilizce yayımlanır.
Etkilenen ürünler ve sürümler
| Üretici | Ürün | Sürümler | |
|---|---|---|---|
| tenable | nessus | ≤ 10.11.3 | |
| tenable | nessus agent | ≤ 11.1.2 | |
| Tenable, Inc. | Tenable Nessus, Tenable Nessus Agent | Nessus Agent – ≤ 11.1.2, Nessus – ≤ 10.11.3 |
Kaynaklar ve yamalar
- https://tenable.com/security/tns-2026-12 Vendor Advisory
- https://tenable.com/security/tns-2026-13 Vendor Advisory
CPE eşleşmeleri (NVD) (2)
cpe:2.3:a:tenable:nessus:*:*:*:*:*:*:*:*≤ 10.11.3cpe:2.3:a:tenable:nessus_agent:*:*:*:*:*:*:*:*≤ 11.1.2