PT-2026-34718 · Tenable · Tenable Nessus

Published 2026-04-23 · Updated 2026-04-28 · CVE-2026-33694

Positive Technologies (AI Summary)

CVSS v4.0

8.6

High

Base vector

AV:L/AC:L/AT:N/PR:L/UI:A/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H

Name of the Vulnerable Software and Affected Versions The product name cannot be determined (affected versions not specified)

Description An issue allows an attacker to create a junction, which enables the deletion of arbitrary files with SYSTEM privileges. This condition potentially facilitates arbitrary code execution, allowing an attacker to execute malicious code with elevated SYSTEM privileges.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Link Following

Weakness Enumeration

CWE-59

Related Identifiers

CVE-2026-33694

Affected Products

Tenable Nessus

References · 9

• https://nvd.nist.gov/vuln/detail/CVE-2026-33694 · Security Note
• https://twitter.com/CCBalert/status/2048777177315860851 · Twitter Post
• https://twitter.com/ElusivePrivacy/status/2048375663808118884 · Twitter Post
• https://twitter.com/cybrsecpath/status/2048773904093823443 · Twitter Post
• https://reddit.com/r/pwnhub/comments/1sukqym/critical_vulnerabilities_patched_in_crowdstrike · Reddit Post
• https://twitter.com/CVEnew/status/2047428092084535648 · Twitter Post
• https://tenable.com/security/tns-2026-13 · Note
• https://tenable.com/security/tns-2026-12 · Note
• https://twitter.com/cheddar420yolo/status/2048968673080025212 · Twitter Post