CVE-2026-4433

CVE-2026-4433

Medium · published March 25, 2026

CVSS v3.1
4.3
EPSS
0%
Percentile
19.9
In the wild
Unconfirmed
What it is

An SSH misconfigurations exists in Tenable OT that led to the potential exfiltration of socket, port, and service information via the ostunnel user and GatewayPorts. This could be used to potentially glean information about the underlying system and give an attacker information that could be used to attempt to compromise the host.

The record
Technical detail
CVSS v3.1
4.3 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00284 · 19.9th percentile
Published
2026-03-25T01:16Z
Affected products (1)
ProductVersionsFixed in
tenable/operational_technology_exposure≥ 3.18.58, < 4.2.404.2.40
References (1)
https://www.tenable.com/security/tns-2026-9 · [email protected]
EPSS history
Timeline
  • 24 MAR 20:26Z
    An SSH misconfigurations exists in Tenable OT that led to the potential exfiltration of socket, port, and service information via the ostunnel user and…
    cvelistv5