CVE-2026-15265

Katalog CVE

CVSS 9.1 · Critical EPSS 0,56%

Kerentanan Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') pada tenable nessus agent. Skor CVSS 3.1 9.1 (Critical) menurut tenable.com.

Deskripsi (NVD)

A path traversal vulnerability in Tenable Agent 11.2.0 and 11.1.3 and lower allows a privileged attacker to write arbitrary files outside the intended plugin directory, potentially leading to remote code execution.

Rincian

Terbit di NVD

14 Juli 2026

Terakhir diubah

25 Agustus 2026

Status NVD

Analyzed

CVSS 3.1

9.1 (Critical), sumber tenable.com
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CWE-347: Improper Verification of Cryptographic Signature

EPSS (30 hari)

0,56% peluang dieksploitasi; lebih tinggi dari 44,9% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://www.tenable.com/security/tns-2026-18 advisory pihak ketiga