Skip to content
ThreatCluster

Critical Nessus Agent Vulnerability Allows SYSTEM-Level Code Execution

First seen 27 Apr 2026, 13:02 UTC • •
API

Article Content

Browse articles
ThreatCluster AI
ThreatCluster •April 28, 2026 at 12:34 UTC
  • •CVE-2026-33694 allows arbitrary code execution with SYSTEM privileges.
  • •The vulnerability affects Tenable's Nessus Agent for Windows.
  • •A patch has been released in version 11.1.3; immediate updates are recommended.

Tenable has disclosed a high-severity vulnerability in its Nessus Agent software for Windows, tracked as CVE-2026-33694, which allows attackers to execute arbitrary code with SYSTEM-level privileges. The flaw arises from improper link resolution before file access, categorized under CWE-59 (Link Following). This vulnerability affects organizations using the widely-deployed Nessus Agent for vulnerability assessments, posing a significant risk to enterprise security. A patch has been released in version 11.1.3 of the Nessus Agent to address this issue. Security teams are urged to update their systems immediately to mitigate the risk of exploitation. The vulnerability was published on April 23, 2026, and is considered critical due to its potential impact on system integrity and confidentiality.

Start a free Starter trial for enhanced analysis

Ask AI about this cluster

Updated 171d ago How this analysis works

Timeline

2026-04-23
CVE-2026-33694 published
2026-04-27
Tenable discloses Nessus Agent vulnerability
2026-04-27
Patch released in Nessus Agent version 11.1.3

More articles in this cluster (2)

Following this threat?

Track Tenable and CVE-2026-33694 in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.

Free account · no card needed

Extracted Entities (5)

1 / 3