low3.3Public exploit code
CVE-2026-57588
A SQL injection vulnerability in Nessus allows an attacker to craft a malicious scan result file that, when imported by a privileged user, injects malicious SQ…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Tenable Nessus 10.12.1 - SQL Injection2026-07-07 · webapps · multiple
Impact
A SQL injection vulnerability in Nessus allows an attacker to craft a malicious scan result file that, when imported by a privileged user, injects malicious SQL into the scan results database, potentially enabling exfiltration of scan-result data.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Tenable | Nessus | before 10.12.1 |