CVE-2026-4433: Low severity Tenable Tenable OT vulnerability
An SSH misconfigurations exists in Tenable OT that led to the potential exfiltration of socket, port, and service information via the ostunnel user and GatewayPorts. This could be used to potentially glean information about the underlying system and give an attacker information that could be used to attempt to compromise the host.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-4433?
CVE-2026-4433 is rated as a medium-severity vulnerability that could lead to potential information exfiltration.
How do I fix CVE-2026-4433?
To mitigate CVE-2026-4433, ensure that SSH configurations are reviewed and hardened to restrict GatewayPorts and ostunnel permissions.
What systems are affected by CVE-2026-4433?
CVE-2026-4433 affects the Tenable OT software environment.
What potential risks are associated with CVE-2026-4433?
CVE-2026-4433 can allow attackers to gather sensitive socket, port, and service information, leading to further exploitation.
Is there a patch available for CVE-2026-4433?
As of now, a specific patch for CVE-2026-4433 has not been publicly disclosed, but users should follow guidelines to secure their SSH configurations.