SQL Injection Vulnerability in Nessus by Tenable
CVE-2026-57587

2.1LOW

Key Information:

Vendor

Tenable

Status
Nessus
Vendor
CVE Published:
25 June 2026

What is CVE-2026-57587?

A SQL injection vulnerability in Nessus allows remote attackers, who have control over reverse DNS records for a scanned host, to embed malicious SQL commands into the database that stores scan results. This can potentially enable unauthorized access and exfiltration of sensitive scan data, putting organizations at risk.

Affected Version(s)

Nessus 0 < 10.12.1

References

https://www.tenable.com/security/tns-2026-17
vendor-advisory

CVSS V4

Score:
2.1
Severity:
LOW
Confidentiality:
Low
Integrity:
None
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Attack Required:
Physical
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Tristan Madani (@TristanInSec) from Talence Security
.