[CVE-2026-15265] A path traversal vulnerability in Tenable Agent 11.2.0 and 11.1.3 and lower allows a privileged atta…

Descripción técnica

A path traversal vulnerability in Tenable Agent 11.2.0 and 11.1.3 and lower allows a privileged attacker to write arbitrary files outside the intended plugin directory, potentially leading to remote code execution.

Puntuación CVSS

Score: 9.1/10 — Severidad: CRITICAL — Estado NIST: Awaiting Analysis

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H

Debilidades (CWE)

CWE-22, CWE-347

Fuente oficial

Publicado en NIST NVD.