PT-2025-27580 · Tenable · Tenable Nessus

Published 2025-06-30 · Updated 2025-08-08 · CVE-2025-36630

Positive Technologies (AI Summary)

CVSS v3.1

8.4

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:H/A:H

Name of the Vulnerable Software and Affected Versions: Tenable Nessus versions prior to 10.8.5

Description: A security issue was discovered where a non-administrative user could overwrite arbitrary local system files with log content at SYSTEM privilege on a Windows host.

Recommendations: For versions prior to 10.8.5, update to version 10.8.5 or later to resolve the issue. As a temporary workaround, consider restricting access to system files to minimize the risk of exploitation.

Fix

LPE

Improper Privilege Management

Weakness Enumeration

CWE-269

Related Identifiers

BDU:2025-11610

CVE-2025-36630

Affected Products

Tenable Nessus

References · 10

• https://tenable.com/security/tns-2025-13 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2025-36630 · Vendor Advisory
• https://bdu.fstec.ru/vul/2025-11610 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2025-36630 · Security Note
• https://reddit.com/r/CVEWatch/comments/1lrf5ab/top_10_trending_cves_04072025 · Reddit Post
• https://twitter.com/The_Cyber_News/status/1940349765239115858 · Twitter Post
• https://t.me/cvenotify/127327 · Telegram Post
• https://twitter.com/CCBalert/status/1940412528120529324 · Twitter Post
• https://twitter.com/cracbot/status/1942176810697208029 · Twitter Post
• https://twitter.com/CVEnew/status/1940191877401047419 · Twitter Post