CVE-2026-15265 - Vulnerability Details - OpenCVE

A path traversal vulnerability in Tenable Agent 11.2.0 and 11.1.3 and lower allows a privileged attacker to write arbitrary files outside the intended plugin directory, potentially leading to remote code execution.

Attack Vector Network

Attack Complexity Low

Privileges Required High

Attack Requirements None

User Interaction None

Vulnerable System Confidentiality Impact High

Vulnerable System Integrity Impact High

Vulnerable System Availability Impact High

Subsequent System Confidentiality Impact High

Subsequent System Integrity Impact High

Subsequent System Availability Impact High

Attack Vector Network

Attack Complexity Low

Privileges Required High

Scope Changed

Confidentiality Impact High

Integrity Impact High

Availability Impact High

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

No EPSS score available.

Exploitation none

Automatable no

Technical Impact total

No data.

No data.

No data.

No data.

References

Link	Providers
https://www.tenable.com/security/tns-2026-18

History

Tue, 14 Jul 2026 16:30:00 +0000

Type	Values Removed	Values Added
Metrics		ssvc `{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'total'}, 'version': '2.0.3'}`

Tue, 14 Jul 2026 15:15:00 +0000

Type	Values Removed	Values Added
Description		A path traversal vulnerability in Tenable Agent 11.2.0 and 11.1.3 and lower allows a privileged attacker to write arbitrary files outside the intended plugin directory, potentially leading to remote code execution.
Title		Tenable Agent Path Traversal Leading to Remote Code Execution
Weaknesses		CWE-22 CWE-347
References		https://www.tenable.com/security/tns-2026-18
Metrics		cvssV3_1 `{'score': 9.1, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H/E:F/RL:U/RC:C'}` cvssV4_0 `{'score': 9.3, 'vector': 'CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H'}`

MITRE

Status: PUBLISHED

Assigner: tenable

Published: 2026-07-14T15:02:37.223Z

Updated: 2026-07-14T15:27:23.145Z

Reserved: 2026-07-09T14:11:48.773Z

Link: CVE-2026-15265

Vulnrichment

Updated: 2026-07-14T15:27:19.934Z

NVD

No data.

Redhat

No data.

OpenCVE Enrichment

No data.

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-15265", "assignerOrgId": "5ac1ecc2-367a-4d16-a0b2-35d495ddd0be", "state": "PUBLISHED", "assignerShortName": "tenable", "dateReserved": "2026-07-09T14:11:48.773Z", "datePublished": "2026-07-14T15:02:37.223Z", "dateUpdated": "2026-07-14T15:27:23.145Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "5ac1ecc2-367a-4d16-a0b2-35d495ddd0be", "shortName": "tenable", "dateUpdated": "2026-07-14T15:02:37.223Z"}, "title": "Tenable Agent Path Traversal Leading to Remote Code Execution", "descriptions": [{"lang": "en", "value": "A path traversal vulnerability in Tenable Agent 11.2.0 and 11.1.3 and lower allows a privileged attacker to write arbitrary files outside the intended plugin directory, potentially leading to remote code execution."}], "affected": [{"vendor": "tenable", "product": "tenable_agent", "platforms": ["Linux", "Windows", "macOS"], "versions": [{"version": "11.2.0", "status": "affected"}, {"version": "0", "lessThanOrEqual": "11.1.3", "status": "affected", "versionType": "semver"}]}], "problemTypes": [{"descriptions": [{"type": "CWE", "cweId": "CWE-22", "lang": "en", "description": "Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')"}]}, {"descriptions": [{"type": "CWE", "cweId": "CWE-347", "lang": "en", "description": "Improper Verification of Cryptographic Signature"}]}], "references": [{"url": "https://www.tenable.com/security/tns-2026-18", "name": "TNS-2026-18", "tags": ["vendor-advisory"]}], "metrics": [{"cvssV3_1": {"version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H/E:F/RL:U/RC:C", "baseScore": 9.1, "baseSeverity": "CRITICAL", "temporalScore": 8.9, "temporalSeverity": "HIGH"}}, {"cvssV4_0": {"version": "4.0", "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H", "baseScore": 9.3, "baseSeverity": "CRITICAL"}}], "credits": [{"lang": "en", "value": "Neil Graves / LVL 0x00, LLC", "type": "reporter"}], "datePublic": "2026-07-09T00:00:00.000Z", "x_generator": {"engine": "cvelib 1.8.0"}}, "adp": [{"metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2026-07-14T15:27:16.469550Z", "id": "CVE-2026-15265", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "total"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-07-14T15:27:23.145Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2026-15265", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "total"}], "version": "2.0.3", "timestamp": "2026-07-14T15:27:16.469550Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-07-14T15:27:19.934Z"}}], "cna": {"title": "Tenable Agent Path Traversal Leading to Remote Code Execution", "credits": [{"lang": "en", "type": "reporter", "value": "Neil Graves / LVL 0x00, LLC"}], "metrics": [{"cvssV3_1": {"version": "3.1", "baseScore": 9.1, "baseSeverity": "CRITICAL", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H/E:F/RL:U/RC:C", "temporalScore": 8.9, "temporalSeverity": "HIGH"}}, {"cvssV4_0": {"version": "4.0", "baseScore": 9.3, "baseSeverity": "CRITICAL", "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H"}}], "affected": [{"vendor": "tenable", "product": "tenable_agent", "versions": [{"status": "affected", "version": "11.2.0"}, {"status": "affected", "version": "0", "versionType": "semver", "lessThanOrEqual": "11.1.3"}], "platforms": ["Linux", "Windows", "macOS"]}], "datePublic": "2026-07-09T00:00:00.000Z", "references": [{"url": "https://www.tenable.com/security/tns-2026-18", "name": "TNS-2026-18", "tags": ["vendor-advisory"]}], "x_generator": {"engine": "cvelib 1.8.0"}, "descriptions": [{"lang": "en", "value": "A path traversal vulnerability in Tenable Agent 11.2.0 and 11.1.3 and lower allows a privileged attacker to write arbitrary files outside the intended plugin directory, potentially leading to remote code execution."}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-22", "description": "Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')"}]}, {"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-347", "description": "Improper Verification of Cryptographic Signature"}]}], "providerMetadata": {"orgId": "5ac1ecc2-367a-4d16-a0b2-35d495ddd0be", "shortName": "tenable", "dateUpdated": "2026-07-14T15:02:37.223Z"}}}, "cveMetadata": {"cveId": "CVE-2026-15265", "state": "PUBLISHED", "dateUpdated": "2026-07-14T15:27:23.145Z", "dateReserved": "2026-07-09T14:11:48.773Z", "assignerOrgId": "5ac1ecc2-367a-4d16-a0b2-35d495ddd0be", "datePublished": "2026-07-14T15:02:37.223Z", "assignerShortName": "tenable"}, "dataVersion": "5.2"}