CVE-2026-103946: SQL Injection
Published Oct 14, 2026
·Updated
An SQL injection vulnerability could allow an authenticated user to read or modify data stored by Nessus.
Affected Software
1 affected component
Tenable Nessus
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
Nessusto a version that resolves this vulnerability.Fixed in 10.12.5
Event History
Oct 14, 2026
CVE Published
via MITRE·04:18 PM
Data Sourced
via MITRE·04:18 PM
RemedyDescriptionSeverityWeakness
Frequently Asked Questions
1
Who can exploit this issue?
An attacker must be authenticated to Nessus. The provided information does not indicate that unauthenticated users can exploit it.
2
What could a successful attack allow?
A successful SQL injection could allow the authenticated attacker to read or modify data stored by Nessus.
3
Does exploitation require user interaction or special conditions?
No user interaction is required, and the attack complexity is rated low. The vulnerability is remotely reachable over the network, but requires low-level privileges.