https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2025-24917.htmlhttps://patchthecve.com/cve/CVE-2025-24917.htmlWed, 17 Jun 2026 08:59:50 +0000HIGH 7.8: In Tenable Network Monitor versions prior to 6.5.1 on a Windows host, it was found that a non-administrative user could stage files in a local directory to run arbitrary code with SYSTEM privileges, potentially leading to local privilege escalation.https://patchthecve.com/cve/CVE-2025-24916.htmlhttps://patchthecve.com/cve/CVE-2025-24916.htmlWed, 17 Jun 2026 08:59:50 +0000HIGH 7.0: When installing Tenable Network Monitor to a non-default location on a Windows host, Tenable Network Monitor versions prior to 6.5.1 did not enforce secure permissions for sub-directories. This could allow for local privilege escalation if users had not secured the directories in the non-default inshttps://patchthecve.com/cve/CVE-2024-9158.htmlhttps://patchthecve.com/cve/CVE-2024-9158.htmlWed, 17 Jun 2026 08:24:03 +0000HIGH 8.4: A stored cross site scripting vulnerability exists in Nessus Network Monitor where an authenticated, privileged local attacker could inject arbitrary code into the NNM UI via the local CLI.