CVE-2026-4433 LOW

CVE-2026-4433

Vendor Tenable, Inc.
Product Tenable Operation Technology
Weakness CWE-16
Published March 24, 2026
Last update March 25, 2026

CVSS base score

1.9/10
Attack vector Network
Attack complexity Low
Privileges required Low
User interaction
Confidentiality
Integrity

CVSS vector

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:A/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N/E:P

What the vulnerability does

01Description

An SSH misconfigurations exists in Tenable OT that led to the potential exfiltration of socket, port, and service information via the ostunnel user and GatewayPorts. This could be used to potentially glean information about the underlying system and give an attacker information that could be used to attempt to compromise the host.

Key dates

02Disclosure timeline

March 24, 2026 CVE published
March 25, 2026 Record updated