CVE-2026-4433
CVE-2026-4433
Vexday Risk Score
8Low
SSVC decision (CISA)
Track
No exploitation signal → monitor
CVSS 1.9EPSS 0.2%KEV nãoPoC —Patch —
Lifecycle
Mar 24, 2026Published on NVD
Recommendation: Monitor — no exploitation signal at the moment.
An SSH misconfigurations exists in Tenable OT that led to the potential exfiltration of socket, port, and service information via the ostunnel user and GatewayPorts. This could be used to potentially glean information about the underlying system and give an attacker information that could be used to attempt to compromise the host.
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:A/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N/E:P
Affected products
Tenable, Inc. · Tenable Operation TechnologyWant to know if your infrastructure is exposed to this?
Talk to TrueHacking →