Maple Labs

CVE search · CVE-2026-15265

CVE-2026-15265

critical 9.4

A path traversal vulnerability in Tenable Agent 11.2.0 and 11.1.3 and lower allows a privileged attacker to write arbitrary files outside the intended plugin directory, potentially leading to remote code execution.

Open in the NVD CVE.org JSON

Details

Status
Analyzed
Published
Last changed
Source
vulnreport@tenable.com
Weakness
CWE-22, CWE-347

Severity

VersionScoreVectorSource
CVSS 4.0 critical 9.4 CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X vulnreport@tenable.comSecondary
CVSS 3.1 critical 9.1 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H vulnreport@tenable.comSecondary

Affected products

Vendor and product from the NVD’s CPE applicability statements. Versions and conditions are on the NVD’s page.

References