Vulnerability intelligence

CVE-2026-33694

Tenable, Inc. Tenable Nessus, Tenable Nessus Agent CWE-59

This vulnerability allows an attacker to create a junction, enabling the deletion of arbitrary files with SYSTEM privileges. As a result, this condition potentially facilitates arbitrary code execution, whereby an attacker may exploit the vulnerability to execute malicious code with elevated SYSTEM privileges.

CVSS Score

7.4

High

EPSS — Exploit Probability

0.2%

Riskier than 5% of all CVEs · checked 2026-09-09

Exploitation

Not in CISA KEV

KEV does not include every exploited vulnerability

Remediation

unknown

Check vendor advisories

NVD entry PoC / advisory

1 article across 1 outlet · first covered Apr 24, 2026 · latest Apr 24, 2026

Coverage timeline

Critical Path Traversal Flaw Found in CrowdStrike LogScale SIEM
www.securityweek.com · Apr 24, 2026