Nessus Agent Windows Flaw Enables SYSTEM

Gbhackers •Divya • April 27, 2026

Tenable has disclosed a high-severity security vulnerability in its Nessus Agent software for Windows that could allow attackers to execute malicious code with full SYSTEM-level privileges. The flaw, tracked as CVE-2026-33694, has been patched in the newly released Nessus Agent version 11.1.3. The vulnerability stems from improper link resolution before file access, classified under CWE-59 (“Link Following”). On […]

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Critical Nessus Agent Vulnerability Allows SYSTEM-Level Code Execution Tenable has disclosed a high-severity vulnerability in its Nessus Agent software for Windows, tracked as CVE-2026-33694, which allows attackers to execute arbitrary code with SYSTEM-level privileges. The flaw arises from improper link resolution before file access, categorized under CWE-59 (Link Following). This vulnerability affects organizations using the widely-deployed Nessus Agent for vulnerability assessments, posing a significant risk to enterprise security. A patch has been released in version 11.1.3 of the Nessus Agent to address this issue. Security teams are urged to update their systems immediately to mitigate the risk of exploitation. The vulnerability was published on April 23, 2026, and is considered critical due to its potential impact on system integrity and confidentiality. 2 sources 73

Extracted Entities

Nessus Agent Windows Flaw Enables SYSTEM

The full story

Extracted Entities

Attack Types (1)

Companies (1)

CVEs (1)

CWE Weaknesses (1)

Platforms (1)