Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
A SQL injection vulnerability in Nessus allows an attacker to craft a malicious scan result file that, when imported by a privileged user, injects malicious SQL into the scan results database, potentially enabling exfiltration of scan-result data.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
AVAILABLE
Momentum
NONE
If you run products in this scope, you should treat this CVE as relevant to your environment.
Nessusでスキャン結果が外部に漏えいする恐れのある脆弱性。 CVE-2026-57587 CVE-2026-57588 [R2] Nessus Version 10.12.1 Fixes SQL Injection Vulnerabilities - Security Advisory | Tenable® https://www.tenable.com/security/tns-2026-17
Post summary
Two new Nessus CVEs (2026‑57587, 2026‑57588) that could leak scan results are addressed by a patch in Nessus 10.12.1, as outlined in the Tenable security advisory.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | tenable | nessus | - | - | - |