CVE-2025-36640 | Tenable Nessus Agent up to 10.9.2/11.0.1 on Windows Tray App privileges management

January 13, 2026 Yanac

A vulnerability classified as critical has been found in Tenable Nessus Agent up to 10.9.2/11.0.1 on Windows. Affected by this issue is some unknown functionality of the component Tray App. Performing a manipulation results in improper privilege management.

This vulnerability is known as CVE-2025-36640. Attacking locally is a requirement. No exploit is available.

It is recommended to upgrade the affected component.VulDB Recent EntriesRead More