CVE Catalog
CVE-2026-18667
CriticalCVSS 9.6Summary
Tenable Sensor Proxy contains a vulnerability that allows a remote attacker to execute code with elevated privileges by inducing an operator to connect the sensor to an attacker-controlled host.
Risk Assessment
An attacker can take control of the Tenable sensor, potentially compromising scan integrity and accessing sensitive data.
Recommendation
Update Tenable Sensor Proxy to the latest version and instruct operators not to connect sensors to untrusted hosts.
Original NVD description (English source)
A vulnerability in Tenable Sensor Proxy allows a remote attacker to execute code with elevated privileges by inducing an operator to connect the sensor to an attacker-controlled host.