CVE-2026-103946
HIGHCVSS 8.3/10
Last modified
CVE-2026-103946 is a high-severity vulnerability rated 8.3/10 on the CVSS scale. An SQL injection vulnerability could allow an authenticated user to read or modify data stored by Nessus..
Description
An SQL injection vulnerability could allow an authenticated user to read or modify data stored by Nessus.
Metrics
Weakness Enumeration
Affected Software
Source: CNA advisory (CVE.org). NVD analysis pending.
| Vendor | Product | Versions |
|---|---|---|
| Tenable, Inc. | Nessus | < 10.12.5 |
References
Timeline
- Published
- Last Modified
- Status
- Received
Frequently Asked Questions
What is CVE-2026-103946?
An SQL injection vulnerability could allow an authenticated user to read or modify data stored by Nessus.
How severe is CVE-2026-103946?
CVE-2026-103946 has a CVSS score of 8.3/10 (HIGH severity).
How do I fix CVE-2026-103946?
Check the vendor references and advisories linked above for patched versions and mitigation guidance. You can also run a Strix scan to test if your systems are affected.
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2026
- CVE-2026-103923KaTeX is a fast, easy-to-use JavaScript library for TeX math…2.1
- CVE-2026-103928Metabase is an open source business intelligence and analyti…9.3
- CVE-2026-103929mise manages dev tools like node, python, cmake, and terrafo…7.8
- CVE-2026-103930cpp-httplib is a C++ header-only HTTP/HTTPS library. From 0.…3.7
- CVE-2026-103936libp2p is a JavaScript implementation of the libp2p networki…7.5
- CVE-2026-103937Misskey is an open source, federated social media platform. …8.7
- CVE-2026-103956Missing authentication for critical function in the authenti…10
- CVE-2026-103957Server-side request forgery in the OAuth2 discovery handling…6.2
- CVE-2026-103958Server-side request forgery in the tool server and remote ag…7.6
- CVE-2026-103964The Download Manager plugin for WordPress is vulnerable to S…4.3
- CVE-2026-103965An issue in MongoDB Server's aggregation framework can cause…5.4
- CVE-2026-103966Adobe Framemaker is affected by a Heap-based Buffer Overflow…7.8
Are you affected by CVE-2026-103946?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST