PatchSiren

PatchSiren cyber security CVE debrief

CVE-2026-103946 Tenable, Inc. CVE debrief

An SQL injection vulnerability in Nessus could allow an authenticated user to read or modify data. The CVE record was published on 2026-10-14T17:18:13.303Z and has not been modified since then. The NVD entry is currently Awaiting Analysis. This vulnerability has a CVSS score of 8.7 and is considered HIGH severity. Defenders should assess exposure and prioritize patching or mitigation efforts. Verify Nessus deployments for potential exposure to SQL injection attacks and apply patches or mitigations as available.

Vendor
Tenable, Inc.
Product
Nessus
CVSS
HIGH 8.7
CISA KEV
Not listed in stored evidence
Original CVE published
2026-10-14
Original CVE updated
2026-10-17
Advisory published
2026-10-14
Advisory updated
2026-10-17

Who should care

Defenders responsible for Nessus deployments should assess exposure and prioritize patching or mitigation efforts. This includes verifying Nessus deployments for potential exposure to SQL injection attacks and applying patches or mitigations as available. Security teams and vulnerability management teams should also review this vulnerability and assess their exposure.

Why it matters

CVE-2026-103946 is an SQL injection vulnerability in Nessus that could allow an authenticated user to read or modify data. Defenders should prioritize verifying Nessus deployments for potential exposure and apply patches or mitigations as available.

  • Verify Nessus deployments for potential exposure to SQL injection attacks
  • Apply patches or mitigations to prevent data tampering or unauthorized access
  • Monitor Nessus systems for suspicious activity

Technical summary

CVE-2026-103946 is an SQL injection vulnerability in Nessus that could allow an authenticated user to read or modify data stored by Nessus. The vulnerability has a CVSS score of 8.7 and is considered HIGH severity. This vulnerability could allow an attacker to read or modify data stored by Nessus if exploited. Defenders should prioritize verifying Nessus deployments for potential exposure and apply patches or mitigations as available.

Defensive priority

Defenders should prioritize verifying Nessus deployments for potential exposure and apply patches or mitigations as available.

Recommended defensive actions

  • Verify Nessus deployments for potential exposure
  • Apply patches or mitigations as available
  • Monitor Nessus systems for suspicious activity

Evidence notes

The CVE record and NVD entry provide initial details on the SQL injection vulnerability in Nessus. Vendor information is limited. The vulnerability has a CVSS score of 8.7 and is considered HIGH severity. There is no information on exploitation or affected versions. Defenders should verify Nessus deployments for potential exposure.

Sources and references

Verified primary and authoritative sources

  • CVE-2026-103946 CVE Program record

    Publisher, destination, and source semantics verified

    URL: https://www.cve.org/CVERecord?id=CVE-2026-103946

    CVE Program - Official CVE Program record with source-provided CVE metadata.

  • CVE-2026-103946 NVD vulnerability detail

    Publisher, destination, and source semantics verified

    URL: https://nvd.nist.gov/vuln/detail/CVE-2026-103946

    NIST National Vulnerability Database - Official NIST NVD detail page and source-specific vulnerability assessment.

Supplemental references

Methodology and review provenance

AI-assisted synthesis based on stored public vulnerability evidence. System validation, approval state, and publication status do not by themselves establish human review of this revision. PatchSiren helps prioritize defensive review and does not prove exposure or remediation on any system.