Refine your search

3 vulnerabilities found for Network Monitor by Tenable

CERTFR-2026-AVI-1390
Vulnerability from certfr_avis

De multiples vulnérabilités ont été découvertes dans Tenable Network Monitor. Certaines d'entre elles permettent à un attaquant de provoquer une exécution de code arbitraire à distance, un déni de service à distance et une atteinte à la confidentialité des données.

Solutions

Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).

Impacted products
Vendor Product Description
Tenable Network Monitor Network Monitor versions antérieures à 6.6.0
References
Bulletin de sécurité Tenable tns-2026-32 2026-10-26 vendor-advisory

Show details on source website

To clipboard 

{
  "$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
  "affected_systems": [
    {
      "description": "Network Monitor versions ant\u00e9rieures \u00e0 6.6.0",
      "product": {
        "name": "Network Monitor",
        "vendor": {
          "name": "Tenable",
          "scada": false
        }
      }
    }
  ],
  "affected_systems_content": "",
  "content": "## Solutions\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des correctifs (cf. section Documentation).",
  "cves": [
    {
      "name": "CVE-2026-56404",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-56404"
    },
    {
      "name": "CVE-2026-34180",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-34180"
    },
    {
      "name": "CVE-2026-75806",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-75806"
    },
    {
      "name": "CVE-2026-77696",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-77696"
    },
    {
      "name": "CVE-2026-42766",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-42766"
    },
    {
      "name": "CVE-2026-1965",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-1965"
    },
    {
      "name": "CVE-2026-34181",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-34181"
    },
    {
      "name": "CVE-2026-35189",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-35189"
    },
    {
      "name": "CVE-2026-8926",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-8926"
    },
    {
      "name": "CVE-2026-84784",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-84784"
    },
    {
      "name": "CVE-2026-11352",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-11352"
    },
    {
      "name": "CVE-2026-3783",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-3783"
    },
    {
      "name": "CVE-2026-63074",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-63074"
    },
    {
      "name": "CVE-2026-8458",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-8458"
    },
    {
      "name": "CVE-2026-6429",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-6429"
    },
    {
      "name": "CVE-2026-86139",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-86139"
    },
    {
      "name": "CVE-2026-56131",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-56131"
    },
    {
      "name": "CVE-2026-66046",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-66046"
    },
    {
      "name": "CVE-2026-86142",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-86142"
    },
    {
      "name": "CVE-2026-56410",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-56410"
    },
    {
      "name": "CVE-2026-9546",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-9546"
    },
    {
      "name": "CVE-2026-63073",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-63073"
    },
    {
      "name": "CVE-2026-14456",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-14456"
    },
    {
      "name": "CVE-2026-14457",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-14457"
    },
    {
      "name": "CVE-2026-8932",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-8932"
    },
    {
      "name": "CVE-2026-45186",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-45186"
    },
    {
      "name": "CVE-2026-56412",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-56412"
    },
    {
      "name": "CVE-2026-54875",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-54875"
    },
    {
      "name": "CVE-2026-77214",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-77214"
    },
    {
      "name": "CVE-2026-42772",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-42772"
    },
    {
      "name": "CVE-2026-11586",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-11586"
    },
    {
      "name": "CVE-2026-6253",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-6253"
    },
    {
      "name": "CVE-2026-7009",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-7009"
    },
    {
      "name": "CVE-2026-54873",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-54873"
    },
    {
      "name": "CVE-2026-76641",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-76641"
    },
    {
      "name": "CVE-2026-76781",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-76781"
    },
    {
      "name": "CVE-2026-8924",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-8924"
    },
    {
      "name": "CVE-2026-3805",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-3805"
    },
    {
      "name": "CVE-2026-9079",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-9079"
    },
    {
      "name": "CVE-2026-63075",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-63075"
    },
    {
      "name": "CVE-2026-56407",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-56407"
    },
    {
      "name": "CVE-2026-86137",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-86137"
    },
    {
      "name": "CVE-2026-76956",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-76956"
    },
    {
      "name": "CVE-2026-0990",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-0990"
    },
    {
      "name": "CVE-2026-9080",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-9080"
    },
    {
      "name": "CVE-2026-56405",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-56405"
    },
    {
      "name": "CVE-2026-63076",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-63076"
    },
    {
      "name": "CVE-2026-72897",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-72897"
    },
    {
      "name": "CVE-2026-56411",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-56411"
    },
    {
      "name": "CVE-2026-9545",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-9545"
    },
    {
      "name": "CVE-2026-18798",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-18798"
    },
    {
      "name": "CVE-2026-34183",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-34183"
    },
    {
      "name": "CVE-2026-56406",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-56406"
    },
    {
      "name": "CVE-2026-1757",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-1757"
    },
    {
      "name": "CVE-2026-56408",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-56408"
    },
    {
      "name": "CVE-2026-86141",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-86141"
    },
    {
      "name": "CVE-2026-42767",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-42767"
    },
    {
      "name": "CVE-2026-50219",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-50219"
    },
    {
      "name": "CVE-2026-56403",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-56403"
    },
    {
      "name": "CVE-2026-4873",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-4873"
    },
    {
      "name": "CVE-2026-11979",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-11979"
    },
    {
      "name": "CVE-2026-93990",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-93990"
    },
    {
      "name": "CVE-2026-8925",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-8925"
    },
    {
      "name": "CVE-2026-56409",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-56409"
    },
    {
      "name": "CVE-2026-42764",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-42764"
    },
    {
      "name": "CVE-2026-86144",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-86144"
    },
    {
      "name": "CVE-2026-75803",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-75803"
    },
    {
      "name": "CVE-2026-54872",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-54872"
    },
    {
      "name": "CVE-2026-5773",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-5773"
    },
    {
      "name": "CVE-2026-8927",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-8927"
    },
    {
      "name": "CVE-2026-6276",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-6276"
    },
    {
      "name": "CVE-2026-0992",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-0992"
    },
    {
      "name": "CVE-2026-75805",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-75805"
    },
    {
      "name": "CVE-2026-102633",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-102633"
    },
    {
      "name": "CVE-2026-11564",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-11564"
    },
    {
      "name": "CVE-2026-34182",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-34182"
    },
    {
      "name": "CVE-2026-86138",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-86138"
    },
    {
      "name": "CVE-2026-86140",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-86140"
    },
    {
      "name": "CVE-2026-74860",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-74860"
    },
    {
      "name": "CVE-2026-35191",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-35191"
    },
    {
      "name": "CVE-2026-9547",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-9547"
    },
    {
      "name": "CVE-2026-56132",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-56132"
    },
    {
      "name": "CVE-2026-54874",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-54874"
    },
    {
      "name": "CVE-2026-7168",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-7168"
    },
    {
      "name": "CVE-2026-76957",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-76957"
    },
    {
      "name": "CVE-2026-6732",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-6732"
    },
    {
      "name": "CVE-2026-75804",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-75804"
    },
    {
      "name": "CVE-2026-86143",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-86143"
    },
    {
      "name": "CVE-2026-8286",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-8286"
    },
    {
      "name": "CVE-2026-0989",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-0989"
    },
    {
      "name": "CVE-2026-63072",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-63072"
    },
    {
      "name": "CVE-2026-5545",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-5545"
    },
    {
      "name": "CVE-2026-3784",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-3784"
    }
  ],
  "initial_release_date": "2026-10-27T00:00:00",
  "last_revision_date": "2026-10-27T00:00:00",
  "links": [],
  "reference": "CERTFR-2026-AVI-1390",
  "revisions": [
    {
      "description": "Version initiale",
      "revision_date": "2026-10-27T00:00:00.000000"
    }
  ],
  "risks": [
    {
      "description": "D\u00e9ni de service \u00e0 distance"
    },
    {
      "description": "Ex\u00e9cution de code arbitraire \u00e0 distance"
    },
    {
      "description": "Atteinte \u00e0 l\u0027int\u00e9grit\u00e9 des donn\u00e9es"
    },
    {
      "description": "Falsification de requ\u00eates c\u00f4t\u00e9 serveur (SSRF)"
    },
    {
      "description": "Contournement de la politique de s\u00e9curit\u00e9"
    },
    {
      "description": "Atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es"
    }
  ],
  "summary": "De multiples vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 d\u00e9couvertes dans Tenable Network Monitor. Certaines d\u0027entre elles permettent \u00e0 un attaquant de provoquer une ex\u00e9cution de code arbitraire \u00e0 distance, un d\u00e9ni de service \u00e0 distance et une atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es.",
  "title": "Multiples vuln\u00e9rabilit\u00e9s dans Tenable Network Monitor",
  "vendor_advisories": [
    {
      "published_at": "2026-10-26",
      "title": "Bulletin de s\u00e9curit\u00e9 Tenable tns-2026-32",
      "url": "https://www.tenable.com/security/tns-2026-32"
    }
  ]
}

CVE-2025-24917 (GCVE-0-2025-24917)
Vulnerability from cvelistv5
Published
2025-05-23 15:59
Modified
2026-02-26 18:27
Severity ?
7.8 (High) - CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CWE
  • CWE-284 - Improper Access Control
Summary
In Tenable Network Monitor versions prior to 6.5.1 on a Windows host, it was found that a non-administrative user could stage files in a local directory to run arbitrary code with SYSTEM privileges, potentially leading to local privilege escalation.
References
Impacted products
Vendor Product Version
Tenable Network Monitor Version: 0   ≤
Create a notification for this product.
Show details on NVD website

To clipboard 

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2025-24917",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2025-05-28T03:56:00.741169Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-02-26T18:27:56.754Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "affected",
          "platforms": [
            "Windows"
          ],
          "product": "Network Monitor",
          "vendor": "Tenable",
          "versions": [
            {
              "lessThan": "6.5.1",
              "status": "affected",
              "version": "0",
              "versionType": "semver"
            }
          ]
        }
      ],
      "configurations": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "Windows Installations, only."
            }
          ],
          "value": "Windows Installations, only."
        }
      ],
      "credits": [
        {
          "lang": "en",
          "type": "finder",
          "value": "Will Dormann"
        }
      ],
      "datePublic": "2025-05-22T19:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "In Tenable Network Monitor versions prior to 6.5.1 on a Windows host, it was found that a non-administrative user could stage files in a local directory to run arbitrary code with SYSTEM privileges, potentially leading to local privilege escalation."
            }
          ],
          "value": "In Tenable Network Monitor versions prior to 6.5.1 on a Windows host, it was found that a non-administrative user could stage files in a local directory to run arbitrary code with SYSTEM privileges, potentially leading to local privilege escalation."
        }
      ],
      "impacts": [
        {
          "capecId": "CAPEC-233",
          "descriptions": [
            {
              "lang": "en",
              "value": "CAPEC-233 Privilege Escalation"
            }
          ]
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "LOCAL",
            "availabilityImpact": "HIGH",
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-284",
              "description": "CWE-284: Improper Access Control",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2025-05-23T15:59:20.064Z",
        "orgId": "5ac1ecc2-367a-4d16-a0b2-35d495ddd0be",
        "shortName": "tenable"
      },
      "references": [
        {
          "url": "https://www.tenable.com/security/tns-2025-10"
        }
      ],
      "solutions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "Tenable has released Tenable Network Monitor 6.5.1 to address these issues. The installation files can be obtained from the Tenable Downloads Portal (\u003ca target=\"_blank\" rel=\"nofollow\" href=\"https://www.tenable.com/downloads/nessus-network-monitor\"\u003e\u003cu\u003ehttps://www.tenable.com/downloads/nessus-network-monitor\u003c/u\u003e\u003c/a\u003e)."
            }
          ],
          "value": "Tenable has released Tenable Network Monitor 6.5.1 to address these issues. The installation files can be obtained from the Tenable Downloads Portal ( https://www.tenable.com/downloads/nessus-network-monitor https://www.tenable.com/downloads/nessus-network-monitor )."
        }
      ],
      "source": {
        "advisory": "tns-2025-10",
        "discovery": "EXTERNAL"
      },
      "title": "Improper Access Control leads to Local Privilege Escalation",
      "x_generator": {
        "engine": "Vulnogram 0.2.0"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "5ac1ecc2-367a-4d16-a0b2-35d495ddd0be",
    "assignerShortName": "tenable",
    "cveId": "CVE-2025-24917",
    "datePublished": "2025-05-23T15:59:20.064Z",
    "dateReserved": "2025-01-28T20:09:40.193Z",
    "dateUpdated": "2026-02-26T18:27:56.754Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2025-24916 (GCVE-0-2025-24916)
Vulnerability from cvelistv5
Published
2025-05-23 15:46
Modified
2026-02-26 18:27
Severity ?
7.0 (High) - CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
CWE
  • CWE-284 - Improper Access Control
Summary
When installing Tenable Network Monitor to a non-default location on a Windows host, Tenable Network Monitor versions prior to 6.5.1 did not enforce secure permissions for sub-directories. This could allow for local privilege escalation if users had not secured the directories in the non-default installation location.
References
Impacted products
Vendor Product Version
Tenable Network Monitor Version: 0   ≤
Create a notification for this product.
Show details on NVD website

To clipboard 

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2025-24916",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2025-05-28T03:56:02.482054Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-02-26T18:27:57.342Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "affected",
          "platforms": [
            "Windows"
          ],
          "product": "Network Monitor",
          "vendor": "Tenable",
          "versions": [
            {
              "lessThan": "6.5.1",
              "status": "affected",
              "version": "0",
              "versionType": "semver"
            }
          ]
        }
      ],
      "configurations": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "Installation of Tenable Network Monitor outside of the Default location on a Windows host"
            }
          ],
          "value": "Installation of Tenable Network Monitor outside of the Default location on a Windows host"
        }
      ],
      "credits": [
        {
          "lang": "en",
          "type": "finder",
          "value": "Will Dormann"
        }
      ],
      "datePublic": "2025-05-22T19:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "When installing Tenable Network Monitor to a non-default location on a Windows host, Tenable Network Monitor versions prior to 6.5.1 did not enforce secure permissions for sub-directories. This could allow for local privilege escalation if users had not secured the directories in the non-default installation location."
            }
          ],
          "value": "When installing Tenable Network Monitor to a non-default location on a Windows host, Tenable Network Monitor versions prior to 6.5.1 did not enforce secure permissions for sub-directories. This could allow for local privilege escalation if users had not secured the directories in the non-default installation location."
        }
      ],
      "impacts": [
        {
          "capecId": "CAPEC-233",
          "descriptions": [
            {
              "lang": "en",
              "value": "CAPEC-233 Privilege Escalation"
            }
          ]
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "HIGH",
            "attackVector": "LOCAL",
            "availabilityImpact": "HIGH",
            "baseScore": 7,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-284",
              "description": "CWE-284: Improper Access Control",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2025-05-23T15:46:02.459Z",
        "orgId": "5ac1ecc2-367a-4d16-a0b2-35d495ddd0be",
        "shortName": "tenable"
      },
      "references": [
        {
          "url": "https://www.tenable.com/security/tns-2025-10"
        }
      ],
      "solutions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "Tenable has released Tenable Network Monitor 6.5.1 to address these issues. The installation files can be obtained from the Tenable Downloads Portal (\u003ca target=\"_blank\" rel=\"nofollow\" href=\"https://www.tenable.com/downloads/nessus-network-monitor\"\u003e\u003cu\u003ehttps://www.tenable.com/downloads/nessus-network-monitor\u003c/u\u003e\u003c/a\u003e).\n\n\u003cbr\u003e"
            }
          ],
          "value": "Tenable has released Tenable Network Monitor 6.5.1 to address these issues. The installation files can be obtained from the Tenable Downloads Portal ( https://www.tenable.com/downloads/nessus-network-monitor https://www.tenable.com/downloads/nessus-network-monitor )."
        }
      ],
      "source": {
        "advisory": "tns-2025-10",
        "discovery": "EXTERNAL"
      },
      "title": "Improper Access Control leads to Local Priviledge Escalation",
      "x_generator": {
        "engine": "Vulnogram 0.2.0"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "5ac1ecc2-367a-4d16-a0b2-35d495ddd0be",
    "assignerShortName": "tenable",
    "cveId": "CVE-2025-24916",
    "datePublished": "2025-05-23T15:46:02.459Z",
    "dateReserved": "2025-01-28T20:09:40.193Z",
    "dateUpdated": "2026-02-26T18:27:57.342Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}