CVE-2026-57588
LOWSQL Injection in Nessus via Malicious Scan Result File Import
Title source: cnaExploitation Summary
EIP tracks 2 public exploits for CVE-2026-57588. PoCs published by banyamer, CerberusMrXi.
AI-analyzed exploit summary This exploit generates a malicious .nessus XML file containing SQL injection payloads in host property tags. When imported by a privileged Nessus user, it exploits insufficient input sanitization in the scan result import functionality to exfiltrate database information or read files via PostgreSQL functions.
Description
A SQL injection vulnerability in Nessus allows an attacker to craft a malicious scan result file that, when imported by a privileged user, injects malicious SQL into the scan results database, potentially enabling exfiltration of scan-result data.
Exploits (2)
This exploit generates a malicious .nessus XML file containing SQL injection payloads in host property tags. When imported by a privileged Nessus user, it exploits insufficient input sanitization in the scan result import functionality to exfiltrate database information or read files via PostgreSQL functions.
This repository contains a functional exploit for CVE-2026-57588, a SQL injection vulnerability in Tenable Nessus 10.12.0 and prior. The exploit targets the XML import functionality, allowing authenticated users with import privileges to execute arbitrary SQL queries, including data exfiltration, command execution, and file system access via PostgreSQL functions.
References (1)
Scores
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N