Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
A SQL injection vulnerability in Nessus allows a remote, unauthenticated attacker who controls reverse DNS records for a scanned host to inject malicious SQL into the scan results database, potentially enabling exfiltration of scan-result data.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
AVAILABLE
Momentum
NONE
If you run products in this scope, you should treat this CVE as relevant to your environment.
Nessusでスキャン結果が外部に漏えいする恐れのある脆弱性。 CVE-2026-57587 CVE-2026-57588 [R2] Nessus Version 10.12.1 Fixes SQL Injection Vulnerabilities - Security Advisory | Tenable® https://www.tenable.com/security/tns-2026-17
Post summary
The post reports that CVE-2026-57587 and CVE-2026-57588 allow Nessus scan results to leak externally, and a patch has been released in Nessus Version 10.12.1 to fix the SQL injection vulnerabilities.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | tenable | nessus | - | - | - |