Remote Code Execution Vulnerability in Tenable Sensor Proxy
CVE-2026-18667

9.3CRITICAL

Key Information:

Vendor
CVE Published:
3 August 2026

What is CVE-2026-18667?

A security flaw in Tenable Sensor Proxy enables an attacker to execute arbitrary code with elevated privileges. This is achieved by tricking a user into connecting the sensor to a host controlled by the attacker, thereby exposing sensitive systems to potential compromise. Addressing this vulnerability is critical to maintaining the integrity and security of the affected systems. For further details, see the official security advisory by Tenable.

Affected Version(s)

Sensor Proxy Linux 0

References

CVSS V4

Score:
9.3
Severity:
CRITICAL
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Neil Graves / LVL 0x00, LLC
.