- 265/2026
- Critical
Tenable has released a security update to address a vulnerability affecting Tenable Sensor Proxy.
The addressed vulnerability could allow the remote attacker to execute code with elevated privileges by inducing an operator to connect the sensor to an attackercontrolled host.
The addressed vulnerability:
Tenable Sensor Proxy Remote Code Execution Vulnerability (CVE-2026-18667):
- CVSS: 9.6
- Attack Vector: Network
- Attack Complexity: Low
- Privileges Required: None
- User Interaction: Required
- Consequences: Remote Code Execution
Vulnerabilities
CVE-2026-18667
Mitigations
The enterprise should deploy this patch as soon as the testing phase is completed.