This vulnerability allows an attacker to create a junction, enabling the deletion of arbitrary files with SYSTEM privileges.

Code

The project this record applies to. Exploit listings stay in References.

No public source repository is identified for this product.

Timeline

Detection, updates, and resolution for this record.

1. Apr 23, 2026 · NIST NVD

   Detected

   This vulnerability allows an attacker to create a junction, enabling the deletion of arbitrary files with SYSTEM privileges. As a result, this condition potentially facilitates arbitrary code execution, whereby an attacker may exploit the vulnerability to execute malicious code with elevated SYSTEM privileges.

2. Aug 21, 2026 · NIST NVD

   Updated

   This vulnerability allows an attacker to create a junction, enabling the deletion of arbitrary files with SYSTEM privileges. As a result, this condition potentially facilitates arbitrary code execution, whereby an attacker may exploit the vulnerability to execute malicious code with elevated SYSTEM privileges.

Affected

• cpe tenable/nessusversion unspecified
• cpe tenable/nessus agentversion unspecified

Sources

• CVE.orgVulnerability recordCVE-2026-33694

  Official CVE identifier

  cve.org
• NIST NVDVulnerability recordCVE-2026-33694

  This vulnerability allows an attacker to create a junction, enabling the deletion of arbitrary files with SYSTEM privileges. As a result, this condition potentially facilitates arbitrary code execution, whereby an attacker may exploit the vulnerability to execute malicious code w

  nvd.nist.gov

References

• Vendor Advisory · tenable.com
• Vendor Advisory · tenable.com