# CVE-2026-33694: This vulnerability allows an attacker to create a junction, enabling the deletion of arbitrary files with SYSTEM…

Source: https://junglewise.ai/threats/cve-2026-33694-this-vulnerability-allows-an-attacker-to-create-a-junction  
Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats  
Published: 2026-04-23  
License: CC BY 4.0 with a link back

CVE-2026-33694 · Severity: high · CVSS 7.8 · Published 2026-04-23

This vulnerability allows an attacker to create a junction, enabling the deletion of arbitrary files with SYSTEM privileges. As a result, this condition potentially facilitates arbitrary code execution, whereby an attacker may exploit the vulnerability to execute malicious code with elevated SYSTEM privileges.

Technologies: [Tenable Nessus](https://junglewise.ai/threats/technologies/nessus). Vendors: [Tenable](https://junglewise.ai/threats/vendors/tenable).

## Quick answers

**Is CVE-2026-33694 exploited in the wild?** No. Junglewise Threat Intelligence has no report of CVE-2026-33694 being exploited in the wild.

**How severe is CVE-2026-33694?** High severity, with a CVSS score of 7.8, published 23 April 2026.

**Which products and versions are affected?** Tenable Nessus, Tenable Nessus Agent. The advisory does not name versions.

**Is there a fix for CVE-2026-33694?** No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.

**Am I affected by CVE-2026-33694?** Check whether you run Tenable Nessus or Tenable Nessus Agent. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

## Affected products

- Tenable Nessus
- Tenable Nessus Agent

## Related threats

- [Tenable Nessus arbitrary file read via Unix compliance audit](https://junglewise.ai/threats/cve-2026-119317-on-linux-an-authenticated-low-privileged-nessus-user-with-scan)
- [Tenable Nessus SQL injection vulnerability](https://junglewise.ai/threats/cve-2026-103946-an-sql-injection-vulnerability-could-allow-an-authenticated-user)
- [Tenable Agent path traversal in plugin directory](https://junglewise.ai/threats/cve-2026-15265-tenable-agent-path-traversal-in-plugin-directory)
- [Tenable Nessus SQL injection in scan result import](https://junglewise.ai/threats/cve-2026-57588-tenable-nessus-sql-injection-in-scan-result-import)
- [Tenable Nessus SQL injection via reverse DNS records](https://junglewise.ai/threats/cve-2026-57587-tenable-nessus-sql-injection-via-reverse-dns-records)