Arbitrary File Read Vulnerability in Nessus by Tenable

CVE-2026-119317

What is CVE-2026-119317?

An authenticated, low-privileged user on Linux using Nessus can exploit a vulnerability that allows them to read arbitrary text files on the scanner host. By executing a custom Unix compliance audit on the scanner itself, the user can access files with the privileges of the nessusd process, leading to potential exposure of sensitive information.

References