PT-2026-27518 · Tenable · Tenable Ot

Published 2026-03-24 · Updated 2026-03-24 · CVE-2026-4433

Positive Technologies (AI Summary)

CVSS v4.0

4.8

Medium

Base vector

AV:N/AC:L/AT:N/PR:L/UI:A/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N

Name of the Vulnerable Software and Affected Versions Tenable OT (affected versions not specified)

Description A misconfiguration in SSH within Tenable OT allows for the potential exfiltration of socket, port, and service information. This is achieved through the ostunnel user and GatewayPorts. An attacker could leverage this information to gather details about the underlying system and potentially compromise the host.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Weakness Enumeration

CWE-16

Related Identifiers

CVE-2026-4433

Affected Products

Tenable Ot

References · 2

• https://nvd.nist.gov/vuln/detail/CVE-2026-4433 · Security Note
• https://tenable.com/security/tns-2026-9 · Note