CVE-2026-33694

This vulnerability allows an attacker to create a junction, enabling the deletion of arbitrary files with SYSTEM privileges. As a result, this condition potentially facilitates arbitrary code execution, whereby an attacker may exploit the vulnerability to execute malicious code with elevated SYSTEM privileges.

Score

CVSS 3.1 7.8 High

Status

Analyzed - vulnreport@tenable.com

Published

2026-04-23

Last modified

2026-10-26

Weaknesses

CWE-59

Affected products

• Nessus (Tenable)
• Nessus Agent (Tenable)
• Tenable Nessus (Tenable Inc.)
• Tenable Nessus Agent (Tenable Inc.)

References

• https://tenable.com/security/tns-2026-12
• https://tenable.com/security/tns-2026-13