Description
This vulnerability allows an attacker to create a junction, enabling the deletion of arbitrary files with SYSTEM privileges. As a result, this condition potentially facilitates arbitrary code execution, whereby an attacker may exploit the vulnerability to execute malicious code with elevated SYSTEM privileges.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Tenable | Tenable Nessus, Tenable Nessus Agent | Nessus Agent – ≤ 11.1.2, Nessus – ≤ 10.11.3 | — |
Advisories 1
- WID-SEC-2026-1255 Tenable Security Nessus: Schwachstelle ermöglicht Ausführen von beliebigem Programmcode mit den Rechten des Dienstes BSI CERT-Bund (WID) · Apr 23, 2026