CVE-2026-15265
CriticalCVSS 9.1Exploitation Probability (EPSS)
Low risk29th percentile - higher than 29% of all known CVEs
Summary
A path traversal vulnerability in Tenable Agent versions 11.2.0, 11.1.3 and lower allows a privileged attacker to write arbitrary files outside the intended plugin directory, potentially leading to remote code execution.
Risk Assessment
The risk for the organization includes potential system compromise by a privileged attacker, which could lead to breach of data confidentiality, integrity, and availability.
Recommendation
It is recommended to immediately update Tenable Agent to a version later than 11.2.0 that includes a fix for this vulnerability.
Original NVD description (English source)
A path traversal vulnerability in Tenable Agent 11.2.0 and 11.1.3 and lower allows a privileged attacker to write arbitrary files outside the intended plugin directory, potentially leading to remote code execution.