CVE-2026-18667

This is a serious “trust” problem in Tenable Sensor Proxy: if someone tricks a staff member into connecting the sensor to a bad server, that attacker may be able to run harmful commands on your machine with higher access. It’s similar to plugging a work device into a charger you’ve been tricked into using—except the result can be full control, not just a malfunction.

This matters if your small business runs Tenable Sensor Proxy and the system operator is able to connect the sensor to a host (for example, during setup, troubleshooting, or integrations). The attack is network-based and does not require the attacker to log in to Sensor Proxy first, but it relies on tricking an operator to connect to an attacker-controlled host.

This should be treated as RED urgency because the vulnerability can allow remote attackers to run code with higher privileges, and the attack is triggered through a network connection that an operator may make. Even though there’s no confirmed public exploit code, the risk is direct and severe once an attacker can influence where the sensor connects.