Tenable Agent vulnerabilities

CVE-2025-36632 [HIGH] CWE-276 CVE-2025-36632: In Tenable Agent versions prior to 10.8.5 on a Windows host, it was found that a non-administrative In Tenable Agent versions prior to 10.8.5 on a Windows host, it was found that a non-administrative user could execute code with SYSTEM privilege.

CVE-2025-36631 [HIGH] CWE-269 CVE-2025-36631: In Tenable Agent versions prior to 10.8.5 on a Windows host, it was found that a non-administrative In Tenable Agent versions prior to 10.8.5 on a Windows host, it was found that a non-administrative user could overwrite arbitrary local system files with log content at SYSTEM privilege.

CVE-2025-36633 [HIGH] CWE-269 CVE-2025-36633: In Tenable Agent versions prior to 10.8.5 on a Windows host, it was found that a non-administrative In Tenable Agent versions prior to 10.8.5 on a Windows host, it was found that a non-administrative user could arbitrarily delete local system files with SYSTEM privilege, potentially leading to local privilege escalation.

CVE-2026-2026 [MEDIUM] CWE-276 CVE-2026-2026: A vulnerability has been identified where weak file permissions in the Nessus Agent directory on Win A vulnerability has been identified where weak file permissions in the Nessus Agent directory on Windows hosts could allow unauthorized access, potentially permitting Denial of Service (DoS) attacks.