CVE-2026-18667 – Tenable Sensor Proxy
CVSS 9.6
CRITICAL
Critical - Same Day Deployment
“A malicious connection target can turn a trusted sensor deployment into a path for elevated code execution.”
CVE-2026-18667 is a Critical vulnerability affecting Tenable Sensor Proxy. The CVSS score is 9.6, which is Critical severity. A remote attacker can execute code with elevated privileges by convincing an operator to connect the sensor to an attacker-controlled host.
The Tenable security update addresses the vulnerable connection path and prevents an attacker-controlled host from being used to achieve elevated code execution.
Key Details
- Attack Vector
- Network
- Attack Complexity
- Low
- Privileges Required
- None
- User Interaction
- Required
- CWE Classification
- CWE-94
Patch this CVE on all your endpoints in under 5 minutes.
First 200 endpoints are free forever, scale as needed.