CVE Catalog
CVE-2026-18667
CriticalCVSS 9.6Exploitation Probability (EPSS)
Low risk0.39%
32th percentile - higher than 32% of all known CVEs
Summary
Tenable Sensor Proxy contains a vulnerability that allows a remote attacker to execute code with elevated privileges by inducing an operator to connect the sensor to an attacker-controlled host.
Risk Assessment
An attacker can take control of the Tenable sensor, potentially compromising scan integrity and accessing sensitive data.
Recommendation
Update Tenable Sensor Proxy to the latest version and instruct operators not to connect sensors to untrusted hosts.
Original NVD description (English source)
A vulnerability in Tenable Sensor Proxy allows a remote attacker to execute code with elevated privileges by inducing an operator to connect the sensor to an attacker-controlled host.