CVE-2026-57588
SQL injection in Tenable Nessus
CVSS score
3.3
EPSS probability
%0.3
Risk score
0.0
Published
4 mo ago
Public Exploits · GitHub and Metasploit Intelligence
This tab scans the sources that NVD labels as exploits, GitHub repositories matching the CVE identifier and Rapid7 Metasploit Framework modules. Only links to sources that were actually found are shown.
PoC for CVE-2026-57588 - SQL injection in Nessus 10.12.0 XML import. Generates malicious .nessus files to enumerate databases, exfiltrate credentials, and test time-based blind injection. For authorized security research. Author: Sudeepa Wanigarathna. Patched in 10.12.1.
Makefile Go / Python
Exploit-DB
Tenable Nessus 10.12.1 - SQL Injection
Makefile Go / Python
Similar Vulnerabilities
9.0
CVE-2021-40438 Actively exploitedmod_proxy SSRF
Patch verified Public Exploits:14EPSS %100
9.8
CVE-2021-3711SM2 Decryption Buffer Overflow
Patch verifiedEPSS %88
7.5
CVE-2022-0778Infinite loop in BN_mod_sqrt() reachable when parsing certificates
Patch status unknown Public Exploits:3EPSS %73
7.5
CVE-2020-1967Segmentation fault in SSL_check_chain
Patch verified Public Exploits:1EPSS %53
5.9
CVE-2021-3449NULL pointer deref in signature_algorithms processing
Patch verified Public Exploits:3EPSS %64
6.1
CVE-2021-41184Cross-site scripting in Jqueryui Jquery UI
Patch verified Public Exploits:1EPSS %41
Get this vulnerability through the API
Affected products, version ranges, exploitation status and patch information in a single request, with a free key.
curl -H "x-api-key: $DAYBREACH_API_KEY" \ "https://api.daybreach.dev/api/v1/intel/cves/CVE-2026-57588"