by Kastro
Paper/Archive/CVE-2026-18667

CVE-2026-18667

Tenable, Inc. Sensor Proxy — Sensor Proxy Version 1.4.2 Fixes One Vulnerability

EPSS 0.7%CVSS 9.6
critical.is priorityof 100
40
CVSS 9.6 (CNA)9.6 / 10 × 3028.8Not in CISA KEV+300.0EPSS percentile 53.9.539 × 2010.8No public exploit+100.0SSVC exploitation: none+100.0
Description · from the CVE record

A vulnerability in Tenable Sensor Proxy allows a remote attacker to execute code with elevated privileges by inducing an operator to connect the sensor to an attacker-controlled host.

Affected

ProductAffectedFixed inSource
Sensor Proxy< 1.4.21.4.2CNA

Scores by source

tenable (CNA)9.6CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H
tenable (CNA)9.3CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
CISA ADPSSVCExploitation: none · Automatable: no · Technical impact: total

References

reftenable.com/security/tns-2026-21