SSH Misconfiguration in Tenable OT Exposes System Information

CVE-2026-4433

What is CVE-2026-4433?

A misconfiguration in the Secure Shell (SSH) setup of Tenable OT allows unauthorized access to socket, port, and service information via the ostunnel user and GatewayPorts feature. This vulnerability could potentially enable attackers to gather critical information about the underlying system, increasing the risk of future exploitation and compromise of the host system. It's important for users to review their configurations to enhance their security posture.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch →

References