CVEvulnerability
CVE-2026-4433
1.9 LOW
Official page ↗
- Status
- Analyzed
- Published
- 2026-03-24
- Last modified
- 2026-08-18
- Assigner
- [email protected]
- CVSS 4.0 ([email protected])
- 1.9 LOW — CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:A/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
- CVSS 3.1 ([email protected])
- 4.3 MEDIUM — CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N
- Weaknesses
- CWE-16
Description
An SSH misconfigurations exists in Tenable OT that led to the potential exfiltration of socket, port, and service information via the ostunnel user and GatewayPorts. This could be used to potentially glean information about the underlying system and give an attacker information that could be used to attempt to compromise the host.
Affected configurations
• tenable operational technology exposure (>= 3.18.58 < 4.2.40)
Related
Weakness · not in database (1)
References
- https://www.tenable.com/security/tns-2026-9 Patch, Vendor Advisory