Changelog
Back to All

CLI 6.55.3

November 2nd, 2026

[6.55.3] - 2026-11-02

Changed

  • Nessus import treats every severity 0 item as informational, so an item with no risk factor no longer becomes a Low vulnerability and Low vulnerabilities that earlier imports created from such items are closed on the next import
  • Nessus import leaves the CVSS v3 score of a vulnerability empty when the plugin has no v3 score instead of storing 0.0
  • Nessus vulnerabilities show the Nessus plugin name as their plugin name instead of the CVE, which stays in the CVE field
  • Nessus import reads large scan files faster and uses far less memory
  • Minimum versions of pyasn1 and setuptools raised to 0.6.5 and 84.1.0 so installs always include their security fixes, and the dependency lock is updated so virtualenv is on 21.14.13

Fixed

  • tenable nessus import_nessus now sets each asset's type from the host instead of creating every asset as "Other": an asset-type host tag (any asset type value, case and spacing ignored) wins, otherwise the standard system-type property is mapped (router, switch, firewall, load-balancer, hypervisor, mobile, general-purpose, and now embedded and printer as Appliance). The asset category follows the type (Software for application, database, container and cloud types, Hardware otherwise), assets created for findings use the same type, and a host with no type information is still created as "Other"
  • Tanium Cloud vulnerability sync now uses a descriptive title instead of the CVE ID and populates last seen date, remediation, CISA KEV, EPSS score and exploit availability
  • Tanium Cloud compliance sync now includes each rule's title in the finding title and uses it as the plugin name, where findings previously showed only the rule ID
  • Nessus import no longer moves a scan file to the processed folder before its upload and compliance issue sync finish, so a file whose upload or compliance issue sync raised an error is imported again on the next run
  • Nessus import no longer fails the run when the processed folder is read-only
  • Nessus import now reports a finding it could not read as an error, naming the exception
  • Nessus findings now include their port and protocol
  • Nessus STIG and CIS check findings each get their own plugin name instead of sharing the scan plugin's name