Product by Tenable Security

    Nessus

    18 known vulnerabilities in Nessus (Tenable Security), 0 of them actively exploited (CISA KEV).

    Key figures

    18

    Vulnerabilities

    0

    Actively exploited (KEV)

    0

    Used by ransomware

    0

    Critical

    Vulnerabilities

    Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.

    Vulnerabilities in Nessus (Tenable Security)
    HighCVE-2025-59375

    libexpat Project libexpat: Allocation of Resources Without Limits or Throttling

    also in 23 other products

    7.5
    HighCVE-2024-8176

    Libexpat: expat: improper restriction of xml entity expansion depth in libexpat

    also in 37 other products

    7.5
    HighCVE-2026-103954

    Tenable Security Nessus: security vulnerability

    —
    HighCVE-2026-103953

    Tenable Security Nessus: security vulnerability

    —
    HighCVE-2026-103950

    Tenable Security Nessus: security vulnerability

    —
    HighCVE-2026-103955

    Tenable Security Nessus: security vulnerability

    —
    HighCVE-2026-103948

    Tenable Security Nessus: security vulnerability

    —
    HighCVE-2026-103952

    Tenable Security Nessus: security vulnerability

    —
    HighCVE-2026-103951

    Tenable Security Nessus: security vulnerability

    —
    HighCVE-2026-103947

    Tenable Security Nessus: security vulnerability

    —
    HighCVE-2026-103946

    SQL Injection

    also in 1 other product

    8.3
    HighCVE-2025-7425

    Libxslt: libxml2: heap use-after-free in libxslt caused by atype corruption in xmlattrptr

    also in 44 other products

    7.8
    HighCVE-2026-25210

    libexpat Project libexpat: Integer Overflow or Wraparound

    also in 10 other products

    6.9
    HighCVE-2025-24855

    XMLSoft libxslt: Use After Free

    also in 9 other products

    7.8
    MediumCVE-2026-57587

    SQL Injection in Nessus via Reverse DNS Lookup

    also in 1 other product

    5.3
    LowCVE-2025-6170

    Libxml2: stack buffer overflow in xmllint interactive shell command handling

    also in 42 other products

    2.5
    LowCVE-2026-24515

    libexpat Project libexpat: NULL Pointer Dereference

    also in 9 other products

    2.9
    LowCVE-2026-57588

    SQL Injection in Nessus via Malicious Scan Result File Import

    also in 1 other product

    3.3

    All products by Tenable Security