CVE-2026-4433_CVE-2026-4433

1.9 / 10

LOW

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:A/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N/E:P

Description

An SSH misconfigurations exists in Tenable OT that led to the potential exfiltration of socket, port, and service information via the ostunnel user and GatewayPorts. This could be used to potentially glean information about the underlying system and give an attacker information that could be used to attempt to compromise the host.

Basic Information

ID CVE-2026-4433

Source tenable

Published Mar 24, 2026 at 20:26

Modified Mar 25, 2026 at 14:27

Affected Product

Vendor Tenable, Inc.

Product Tenable Operation Technology

Version 3.18.58

Affected Versions Tenable, Inc. Tenable Operation Technology 3.18.58

CWE Classification

CWE-16

References

www.tenable.com /security/tns-2026-9

{
    "lastseen": "",
    "description": "An SSH misconfigurations exists in Tenable OT that led to the potential exfiltration of socket, port, and service information via the ostunnel user and GatewayPorts. This could be used to potentially glean information about the underlying system and give an attacker information that could be used to attempt to compromise the host.",
    "published": "2026-03-24T20:26:15.338Z",
    "modified": "2026-03-25T14:27:17.139Z",
    "type": "cve",
    "title": "CVE-2026-4433",
    "source": "tenable",
    "references": "https://www.tenable.com/security/tns-2026-9",
    "id": "CVE-2026-4433",
    "bulletinFamily": "",
    "cwe": [
        "CWE-16"
    ],
    "cvelist": null,
    "sourceData": "Tenable, Inc. Tenable Operation Technology 3.18.58",
    "sourceHref": "",
    "cvss": {
        "score": 1.9,
        "severity": "LOW",
        "vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:A/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N/E:P",
        "version": "4.0"
    },
    "cvss2": [],
    "cvss3": {
        "version": "",
        "vectorString": "",
        "baseScore": 0,
        "baseSeverity": "",
        "attackVector": "",
        "attackComplexity": "",
        "privilegesRequired": "",
        "userInteraction": "",
        "scope": "",
        "confidentialityImpact": "",
        "integrityImpact": "",
        "availabilityImpact": "",
        "cvssV3": {
            "version": "",
            "vectorString": "",
            "baseScore": 0,
            "baseSeverity": "",
            "attackVector": "",
            "attackComplexity": "",
            "privilegesRequired": "",
            "userInteraction": "",
            "scope": "",
            "confidentialityImpact": "",
            "integrityImpact": "",
            "availabilityImpact": ""
        }
    },
    "href": "",
    "category_name": "CVE",
    "post_link": "",
    "product": "Tenable Operation Technology",
    "version": "3.18.58",
    "vendor": "Tenable, Inc.",
    "ai_description": "",
    "ai_severity": "",
    "ai_vendor": "",
    "ai_product": "",
    "ai_version": "",
    "ai_score": 0
}