Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2025-36631

In Tenable Agent versions prior to 10.8.5 on a Windows host, it was found that a non-administrative user could overwrite arbitrary local system files with log content at SYSTEM privilege.

Published

2025-06-13T15:15:19.627

Last Modified

2025-10-23T16:00:08.393

Status

Analyzed

Source

[email protected]

Severity

CVSSv3.1: 8.4 (HIGH)

Weaknesses
  • Type: Secondary
    CWE-269
  • Type: Primary
    NVD-CWE-noinfo
Affected Vendors & Products
Type Vendor Product Version/Range Vulnerable?
Application tenable nessus_agent < 10.8.5 Yes
Operating System microsoft windows - No
References