Product:
Nessus Agent
Summary
A vulnerability has been identified where weak file permissions in the Nessus Agent directory on Windows hosts could allow unauthorized access. This could potentially permit Denial of Service attacks. The issue arises from insufficient access controls that could be exploited by local users.
Details
| Severity | Base Score | CVE |
|---|---|---|
| MEDIUM | 5.4 | CVE-2026-2026 |
Exploitation
To exploit this vulnerability, an attacker with local access to the Windows host can manipulate file permissions in the Nessus Agent directory. By doing so, they may gain unauthorized access to sensitive files or disrupt the service, leading to a Denial of Service condition.
Affected Products
- Nessus Agent: Weak file permissions could allow unauthorized access and potential DoS attacks.
Mitigation
To mitigate this vulnerability, it is recommended to review and strengthen file permissions in the Nessus Agent directory. Ensuring that only authorized users have access can help prevent unauthorized exploitation and maintain service availability.