CVE-2026-33694

This vulnerability allows an attacker to create a junction, enabling the deletion of arbitrary files with SYSTEM privileges. As a result, this condition potentially facilitates arbitrary code execution, whereby an attacker may exploit the vulnerability to execute malicious code with elevated SYSTEM privileges.

CVSS v3 7.8 HIGH

7.8^/10

CVSS v3 : HIGH

Vector :

Exploitability : 1.8 / Impact : 5.9

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required NONE

User Interaction REQUIRED

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact HIGH

Scope UNCHANGED

References

Link	Resource
https://tenable.com/security/tns-2026-12	Vendor Advisory
https://tenable.com/security/tns-2026-13	Vendor Advisory

Configurations

Configuration 1 (hide)

OR	cpe:2.3:a:tenable:nessus::::::::
	cpe:2.3:a:tenable:nessus_agent::::::::

History

26 Oct 2026, 21:10

Type	Values Removed	Values Added
Summary		(es) Esta vulnerabilidad permite a un atacante crear una unión, lo que permite la eliminación de archivos arbitrarios con privilegios de SYSTEM. Como resultado, esta condición potencialmente facilita la ejecución de código arbitrario, mediante la cual un atacante puede explotar la vulnerabilidad para ejecutar código malicioso con privilegios de SYSTEM elevados.

Information

Published : 2026-04-23 19:17

Updated : 2026-10-26 21:10

NVD link : CVE-2026-33694

Mitre link : CVE-2026-33694

CVE.ORG link : CVE-2026-33694

JSON object : View

Products Affected

tenable

nessus
nessus_agent

CWE

CWE-59

Improper Link Resolution Before File Access ('Link Following')

{"id": "CVE-2026-33694", "cveTags": [], "metrics": {"ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2026-33694", "role": "CISA Coordinator", "options": [{"exploitation": "none"}, {"automatable": "no"}, {"technicalImpact": "total"}], "version": "2.0.3", "timestamp": "2026-04-23T00:00:00+00:00"}}], "cvssMetricV31": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 7.8, "attackVector": "LOCAL", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "REQUIRED", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}, "impactScore": 5.9, "exploitabilityScore": 1.8}], "cvssMetricV40": [{"type": "Secondary", "source": "vulnreport@tenable.com", "cvssData": {"Safety": "NOT_DEFINED", "version": "4.0", "Recovery": "NOT_DEFINED", "baseScore": 7.4, "Automatable": "NOT_DEFINED", "attackVector": "LOCAL", "baseSeverity": "HIGH", "valueDensity": "NOT_DEFINED", "vectorString": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:A/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "exploitMaturity": "PROOF_OF_CONCEPT", "providerUrgency": "NOT_DEFINED", "userInteraction": "ACTIVE", "attackComplexity": "LOW", "attackRequirements": "NONE", "privilegesRequired": "LOW", "subIntegrityImpact": "HIGH", "vulnIntegrityImpact": "HIGH", "integrityRequirement": "NOT_DEFINED", "modifiedAttackVector": "NOT_DEFINED", "subAvailabilityImpact": "HIGH", "vulnAvailabilityImpact": "HIGH", "availabilityRequirement": "NOT_DEFINED", "modifiedUserInteraction": "NOT_DEFINED", "modifiedAttackComplexity": "NOT_DEFINED", "subConfidentialityImpact": "HIGH", "vulnConfidentialityImpact": "HIGH", "confidentialityRequirement": "NOT_DEFINED", "modifiedAttackRequirements": "NOT_DEFINED", "modifiedPrivilegesRequired": "NOT_DEFINED", "modifiedSubIntegrityImpact": "NOT_DEFINED", "modifiedVulnIntegrityImpact": "NOT_DEFINED", "vulnerabilityResponseEffort": "NOT_DEFINED", "modifiedSubAvailabilityImpact": "NOT_DEFINED", "modifiedVulnAvailabilityImpact": "NOT_DEFINED", "modifiedSubConfidentialityImpact": "NOT_DEFINED", "modifiedVulnConfidentialityImpact": "NOT_DEFINED"}}]}, "affected": [{"source": "vulnreport@tenable.com", "affectedData": [{"vendor": "Tenable, Inc.", "product": "Tenable Nessus, Tenable Nessus Agent", "versions": [{"status": "affected", "version": "Nessus Agent", "versionType": ".msi", "lessThanOrEqual": "11.1.2"}, {"status": "affected", "version": "Nessus", "versionType": ".msi", "lessThanOrEqual": "10.11.3"}], "platforms": ["Windows"], "defaultStatus": "unaffected"}]}], "published": "2026-04-23T19:17:28.073", "references": [{"url": "https://tenable.com/security/tns-2026-12", "tags": ["Vendor Advisory"], "source": "vulnreport@tenable.com"}, {"url": "https://tenable.com/security/tns-2026-13", "tags": ["Vendor Advisory"], "source": "vulnreport@tenable.com"}], "vulnStatus": "Analyzed", "weaknesses": [{"type": "Secondary", "source": "vulnreport@tenable.com", "description": [{"lang": "en", "value": "CWE-59"}]}], "descriptions": [{"lang": "en", "value": "This vulnerability allows an attacker to create a junction, enabling the deletion of arbitrary files with SYSTEM privileges. As a result, this condition potentially facilitates arbitrary code execution, whereby an attacker may exploit the vulnerability to execute malicious code with elevated SYSTEM privileges."}, {"lang": "es", "value": "Esta vulnerabilidad permite a un atacante crear una uni\u00f3n, lo que permite la eliminaci\u00f3n de archivos arbitrarios con privilegios de SYSTEM. Como resultado, esta condici\u00f3n potencialmente facilita la ejecuci\u00f3n de c\u00f3digo arbitrario, mediante la cual un atacante puede explotar la vulnerabilidad para ejecutar c\u00f3digo malicioso con privilegios de SYSTEM elevados."}], "lastModified": "2026-10-26T21:10:00.170", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:tenable:nessus:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "516CCD6F-2E2E-4BA4-A11B-67E96D413230", "versionEndIncluding": "10.11.3"}, {"criteria": "cpe:2.3:a:tenable:nessus_agent:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "2537E2B2-CA4C-4770-8599-E7B0D24565C8", "versionEndIncluding": "11.1.2"}], "operator": "OR"}]}], "sourceIdentifier": "vulnreport@tenable.com"}