CVE-2026-4433

1.9 lowEPSS 0.2%

Low (1.9) in tenable operational technology exposure. EPSS 0.2% chance of exploitation in the next 30 days.

An SSH misconfigurations exists in Tenable OT that led to the potential exfiltration of socket, port, and service information via the ostunnel user and GatewayPorts. This could be used to potentially glean information about the underlying system and give an attacker information that could be used to attempt to compromise the host.

Severity

CVSS 4.0

1.9 low

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:A/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N/E:P

CVSS 3.1

4.3 medium

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N

EPSS: 0.2% chance of exploitation in the next 30 days; higher than 5% of CVEs (scores of 2026-10-31)
CWE: CWE-16
Published: 2026-03-24
Modified: 2026-08-18
Record from: the NVD, synced 2026-10-19

Affected

tenable:operational_technology_exposure

References

https://www.tenable.com/security/tns-2026-9

Check your stack JSON