Search
Find a vulnerability
Search criteria
117 vulnerabilities
CVE-2026-108311 (GCVE-0-2026-108311)
Vulnerability from cvelistv5 – Published: 2026-10-27 17:35 – Updated: 2026-10-27 17:35
VLAI
EPSS
VEX
Title
Tanium addressed an insufficient logging vulnerability in Tanium Server.
Summary
Tanium addressed an insufficient logging vulnerability in Tanium Server.
Severity
CWE
- CWE-778 - Insufficient Logging
Assigner
References
1 reference
Impacted products
1 product
| Vendor | Product | Version | |
|---|---|---|---|
| Tanium | Tanium Server |
Affected:
7.7.3 , < 7.7.3.8351
(custom)
Affected: 7.8.2 , < 7.8.2.1263 (custom) Affected: 7.8.4 , < 7.8.4.1399 (custom) |
Date Public
2026-10-27 17:26
{
"containers": {
"cna": {
"affected": [
{
"product": "Tanium Server",
"vendor": "Tanium",
"versions": [
{
"lessThan": "7.7.3.8351",
"status": "affected",
"version": "7.7.3",
"versionType": "custom"
},
{
"lessThan": "7.8.2.1263",
"status": "affected",
"version": "7.8.2",
"versionType": "custom"
},
{
"lessThan": "7.8.4.1399",
"status": "affected",
"version": "7.8.4",
"versionType": "custom"
}
]
}
],
"dateAssigned": "2026-10-09T19:21:27.250Z",
"datePublic": "2026-10-27T17:26:23.611Z",
"descriptions": [
{
"lang": "en",
"value": "Tanium addressed an insufficient logging vulnerability in Tanium Server."
}
],
"metrics": [
{
"cvssV3_1": {
"baseScore": 2.7,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:N",
"version": "3.1"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-778",
"description": "Insufficient Logging",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-10-27T17:35:43.548Z",
"orgId": "3938794e-25f5-4123-a1ba-5cbd7f104512",
"shortName": "Tanium"
},
"references": [
{
"name": "TAN-2026-078",
"url": "https://security.tanium.com/TAN-2026-078"
}
],
"title": "Tanium addressed an insufficient logging vulnerability in Tanium Server."
}
},
"cveMetadata": {
"assignerOrgId": "3938794e-25f5-4123-a1ba-5cbd7f104512",
"assignerShortName": "Tanium",
"cveId": "CVE-2026-108311",
"datePublished": "2026-10-27T17:35:43.548Z",
"dateReserved": "2026-10-09T19:21:27.383Z",
"dateUpdated": "2026-10-27T17:35:43.548Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-108303 (GCVE-0-2026-108303)
Vulnerability from cvelistv5 – Published: 2026-10-27 17:35 – Updated: 2026-10-27 17:35
VLAI
EPSS
VEX
Title
Tanium addressed an unauthorized code execution vulnerability in Certificate Manager.
Summary
Tanium addressed an unauthorized code execution vulnerability in Certificate Manager.
Severity
8.8 (High)
CWE
- CWE-77 - Improper Neutralization of Special Elements used in a Command ('Command Injection')
Assigner
References
1 reference
Impacted products
1 product
| Vendor | Product | Version | |
|---|---|---|---|
| Tanium | Certificate Manager |
Affected:
1.17 , < 1.17.417
(custom)
Affected: 1.18 , < 1.18.368 (custom) Affected: 1.22 , < 1.22.119 (custom) |
Date Public
2026-10-27 17:26
{
"containers": {
"cna": {
"affected": [
{
"product": "Certificate Manager",
"vendor": "Tanium",
"versions": [
{
"lessThan": "1.17.417",
"status": "affected",
"version": "1.17",
"versionType": "custom"
},
{
"lessThan": "1.18.368",
"status": "affected",
"version": "1.18",
"versionType": "custom"
},
{
"lessThan": "1.22.119",
"status": "affected",
"version": "1.22",
"versionType": "custom"
}
]
}
],
"dateAssigned": "2026-10-09T19:21:24.393Z",
"datePublic": "2026-10-27T17:26:22.770Z",
"descriptions": [
{
"lang": "en",
"value": "Tanium addressed an unauthorized code execution vulnerability in Certificate Manager."
}
],
"metrics": [
{
"cvssV3_1": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-77",
"description": "Improper Neutralization of Special Elements used in a Command (\u0027Command Injection\u0027)",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-10-27T17:35:43.298Z",
"orgId": "3938794e-25f5-4123-a1ba-5cbd7f104512",
"shortName": "Tanium"
},
"references": [
{
"name": "TAN-2026-075",
"url": "https://security.tanium.com/TAN-2026-075"
}
],
"title": "Tanium addressed an unauthorized code execution vulnerability in Certificate Manager."
}
},
"cveMetadata": {
"assignerOrgId": "3938794e-25f5-4123-a1ba-5cbd7f104512",
"assignerShortName": "Tanium",
"cveId": "CVE-2026-108303",
"datePublished": "2026-10-27T17:35:43.298Z",
"dateReserved": "2026-10-09T19:21:24.565Z",
"dateUpdated": "2026-10-27T17:35:43.298Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-108316 (GCVE-0-2026-108316)
Vulnerability from cvelistv5 – Published: 2026-10-27 17:35 – Updated: 2026-10-27 17:35
VLAI
EPSS
VEX
Title
Tanium addressed an information disclosure vulnerability in Tanium Server.
Summary
Tanium addressed an information disclosure vulnerability in Tanium Server.
Severity
4.3 (Medium)
CWE
- CWE-209 - Generation of Error Message Containing Sensitive Information
Assigner
References
1 reference
Impacted products
1 product
| Vendor | Product | Version | |
|---|---|---|---|
| Tanium | Tanium Server |
Affected:
7.7.3 , < 7.7.3.8351
(custom)
Affected: 7.8.2 , < 7.8.2.1263 (custom) Affected: 7.8.4 , < 7.8.4.1399 (custom) |
Date Public
2026-10-27 17:26
{
"containers": {
"cna": {
"affected": [
{
"product": "Tanium Server",
"vendor": "Tanium",
"versions": [
{
"lessThan": "7.7.3.8351",
"status": "affected",
"version": "7.7.3",
"versionType": "custom"
},
{
"lessThan": "7.8.2.1263",
"status": "affected",
"version": "7.8.2",
"versionType": "custom"
},
{
"lessThan": "7.8.4.1399",
"status": "affected",
"version": "7.8.4",
"versionType": "custom"
}
]
}
],
"dateAssigned": "2026-10-09T19:21:29.009Z",
"datePublic": "2026-10-27T17:26:18.635Z",
"descriptions": [
{
"lang": "en",
"value": "Tanium addressed an information disclosure vulnerability in Tanium Server."
}
],
"metrics": [
{
"cvssV3_1": {
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
"version": "3.1"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-209",
"description": "Generation of Error Message Containing Sensitive Information",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-10-27T17:35:43.092Z",
"orgId": "3938794e-25f5-4123-a1ba-5cbd7f104512",
"shortName": "Tanium"
},
"references": [
{
"name": "TAN-2026-062",
"url": "https://security.tanium.com/TAN-2026-062"
}
],
"title": "Tanium addressed an information disclosure vulnerability in Tanium Server."
}
},
"cveMetadata": {
"assignerOrgId": "3938794e-25f5-4123-a1ba-5cbd7f104512",
"assignerShortName": "Tanium",
"cveId": "CVE-2026-108316",
"datePublished": "2026-10-27T17:35:43.092Z",
"dateReserved": "2026-10-09T19:21:29.182Z",
"dateUpdated": "2026-10-27T17:35:43.092Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-116656 (GCVE-0-2026-116656)
Vulnerability from cvelistv5 – Published: 2026-10-27 17:35 – Updated: 2026-10-27 17:35
VLAI
EPSS
VEX
Title
Tanium addressed an uncontrolled resource consumption vulnerability in Enforce.
Summary
Tanium addressed an uncontrolled resource consumption vulnerability in Enforce.
Severity
7.5 (High)
CWE
- CWE-400 - Uncontrolled Resource Consumption
Assigner
References
1 reference
Impacted products
Date Public
2026-10-27 17:26
{
"containers": {
"cna": {
"affected": [
{
"product": "Enforce",
"vendor": "Tanium",
"versions": [
{
"lessThan": "2.9.736",
"status": "affected",
"version": "2.9",
"versionType": "custom"
},
{
"lessThan": "2.10.778",
"status": "affected",
"version": "2.10",
"versionType": "custom"
},
{
"lessThan": "3.0.373",
"status": "affected",
"version": "3.0",
"versionType": "custom"
}
]
}
],
"dateAssigned": "2026-10-26T19:15:06.278Z",
"datePublic": "2026-10-27T17:26:21.394Z",
"descriptions": [
{
"lang": "en",
"value": "Tanium addressed an uncontrolled resource consumption vulnerability in Enforce."
}
],
"metrics": [
{
"cvssV3_1": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-400",
"description": "Uncontrolled Resource Consumption",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-10-27T17:35:42.916Z",
"orgId": "3938794e-25f5-4123-a1ba-5cbd7f104512",
"shortName": "Tanium"
},
"references": [
{
"name": "TAN-2026-071",
"url": "https://security.tanium.com/TAN-2026-071"
}
],
"title": "Tanium addressed an uncontrolled resource consumption vulnerability in Enforce."
}
},
"cveMetadata": {
"assignerOrgId": "3938794e-25f5-4123-a1ba-5cbd7f104512",
"assignerShortName": "Tanium",
"cveId": "CVE-2026-116656",
"datePublished": "2026-10-27T17:35:42.916Z",
"dateReserved": "2026-10-26T19:15:06.430Z",
"dateUpdated": "2026-10-27T17:35:42.916Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-108325 (GCVE-0-2026-108325)
Vulnerability from cvelistv5 – Published: 2026-10-27 17:35 – Updated: 2026-10-27 17:35
VLAI
EPSS
VEX
Title
Tanium addressed an insertion of sensitive information into log file vulnerability in Reputation.
Summary
Tanium addressed an insertion of sensitive information into log file vulnerability in Reputation.
Severity
6.6 (Medium)
CWE
- CWE-532 - Insertion of Sensitive Information into Log File
Assigner
References
1 reference
Impacted products
1 product
| Vendor | Product | Version | |
|---|---|---|---|
| Tanium | Reputation |
Affected:
6.6 , < 6.6.145
(custom)
Affected: 6.7 , < 6.7.138 (custom) Affected: 6.8 , < 6.8.162 (custom) |
Date Public
2026-10-27 17:26
{
"containers": {
"cna": {
"affected": [
{
"product": "Reputation",
"vendor": "Tanium",
"versions": [
{
"lessThan": "6.6.145",
"status": "affected",
"version": "6.6",
"versionType": "custom"
},
{
"lessThan": "6.7.138",
"status": "affected",
"version": "6.7",
"versionType": "custom"
},
{
"lessThan": "6.8.162",
"status": "affected",
"version": "6.8",
"versionType": "custom"
}
]
}
],
"dateAssigned": "2026-10-09T19:21:32.264Z",
"datePublic": "2026-10-27T17:26:20.299Z",
"descriptions": [
{
"lang": "en",
"value": "Tanium addressed an insertion of sensitive information into log file vulnerability in Reputation."
}
],
"metrics": [
{
"cvssV3_1": {
"baseScore": 6.6,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-532",
"description": "Insertion of Sensitive Information into Log File",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-10-27T17:35:42.735Z",
"orgId": "3938794e-25f5-4123-a1ba-5cbd7f104512",
"shortName": "Tanium"
},
"references": [
{
"name": "TAN-2026-067",
"url": "https://security.tanium.com/TAN-2026-067"
}
],
"title": "Tanium addressed an insertion of sensitive information into log file vulnerability in Reputation."
}
},
"cveMetadata": {
"assignerOrgId": "3938794e-25f5-4123-a1ba-5cbd7f104512",
"assignerShortName": "Tanium",
"cveId": "CVE-2026-108325",
"datePublished": "2026-10-27T17:35:42.735Z",
"dateReserved": "2026-10-09T19:21:32.389Z",
"dateUpdated": "2026-10-27T17:35:42.735Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-116659 (GCVE-0-2026-116659)
Vulnerability from cvelistv5 – Published: 2026-10-27 17:35 – Updated: 2026-10-27 17:35
VLAI
EPSS
VEX
Title
Tanium addressed an uncontrolled resource consumption vulnerability in Enforce.
Summary
Tanium addressed an uncontrolled resource consumption vulnerability in Enforce.
Severity
4.3 (Medium)
CWE
- CWE-770 - Allocation of Resources Without Limits or Throttling
Assigner
References
1 reference
Impacted products
Date Public
2026-10-27 17:26
{
"containers": {
"cna": {
"affected": [
{
"product": "Enforce",
"vendor": "Tanium",
"versions": [
{
"lessThan": "2.9.736",
"status": "affected",
"version": "2.9",
"versionType": "custom"
},
{
"lessThan": "2.10.778",
"status": "affected",
"version": "2.10",
"versionType": "custom"
},
{
"lessThan": "3.0.373",
"status": "affected",
"version": "3.0",
"versionType": "custom"
}
]
}
],
"dateAssigned": "2026-10-26T19:15:07.480Z",
"datePublic": "2026-10-27T17:26:23.333Z",
"descriptions": [
{
"lang": "en",
"value": "Tanium addressed an uncontrolled resource consumption vulnerability in Enforce."
}
],
"metrics": [
{
"cvssV3_1": {
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L",
"version": "3.1"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-770",
"description": "Allocation of Resources Without Limits or Throttling",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-10-27T17:35:42.543Z",
"orgId": "3938794e-25f5-4123-a1ba-5cbd7f104512",
"shortName": "Tanium"
},
"references": [
{
"name": "TAN-2026-077",
"url": "https://security.tanium.com/TAN-2026-077"
}
],
"title": "Tanium addressed an uncontrolled resource consumption vulnerability in Enforce."
}
},
"cveMetadata": {
"assignerOrgId": "3938794e-25f5-4123-a1ba-5cbd7f104512",
"assignerShortName": "Tanium",
"cveId": "CVE-2026-116659",
"datePublished": "2026-10-27T17:35:42.543Z",
"dateReserved": "2026-10-26T19:15:07.631Z",
"dateUpdated": "2026-10-27T17:35:42.543Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-108302 (GCVE-0-2026-108302)
Vulnerability from cvelistv5 – Published: 2026-10-27 17:35 – Updated: 2026-10-27 17:35
VLAI
EPSS
VEX
Title
Tanium addressed an improper access controls vulnerability in Comply.
Summary
Tanium addressed an improper access controls vulnerability in Comply.
Severity
4.3 (Medium)
CWE
- CWE-863 - Incorrect Authorization
Assigner
References
1 reference
Impacted products
Date Public
2026-10-27 17:26
{
"containers": {
"cna": {
"affected": [
{
"product": "Comply",
"vendor": "Tanium",
"versions": [
{
"lessThan": "2.32.263",
"status": "affected",
"version": "2.32",
"versionType": "custom"
},
{
"lessThan": "2.35.323",
"status": "affected",
"version": "2.35",
"versionType": "custom"
},
{
"lessThan": "2.37.326",
"status": "affected",
"version": "2.37",
"versionType": "custom"
}
]
}
],
"dateAssigned": "2026-10-09T19:21:24.023Z",
"datePublic": "2026-10-27T17:26:21.956Z",
"descriptions": [
{
"lang": "en",
"value": "Tanium addressed an improper access controls vulnerability in Comply."
}
],
"metrics": [
{
"cvssV3_1": {
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
"version": "3.1"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-863",
"description": "Incorrect Authorization",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-10-27T17:35:42.350Z",
"orgId": "3938794e-25f5-4123-a1ba-5cbd7f104512",
"shortName": "Tanium"
},
"references": [
{
"name": "TAN-2026-073",
"url": "https://security.tanium.com/TAN-2026-073"
}
],
"title": "Tanium addressed an improper access controls vulnerability in Comply."
}
},
"cveMetadata": {
"assignerOrgId": "3938794e-25f5-4123-a1ba-5cbd7f104512",
"assignerShortName": "Tanium",
"cveId": "CVE-2026-108302",
"datePublished": "2026-10-27T17:35:42.350Z",
"dateReserved": "2026-10-09T19:21:24.198Z",
"dateUpdated": "2026-10-27T17:35:42.350Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-108306 (GCVE-0-2026-108306)
Vulnerability from cvelistv5 – Published: 2026-10-27 17:35 – Updated: 2026-10-27 17:35
VLAI
EPSS
VEX
Title
Tanium addressed a local privilege escalation vulnerability in End-User Notifications.
Summary
Tanium addressed a local privilege escalation vulnerability in End-User Notifications.
Severity
7.8 (High)
CWE
- CWE-59 - Improper Link Resolution Before File Access ('Link Following')
Assigner
References
1 reference
Impacted products
2 products
| Vendor | Product | Version | |
|---|---|---|---|
| Tanium | Endpoint Configuration Toolset Solution |
Affected:
1.51 , < 1.51.60
(custom)
Affected: 1.59 , < 1.59.50 (custom) Affected: 1.71 , < 1.71.25 (custom) |
|
| Tanium | end-user-cx |
Affected:
1.8.47 , < 1.8.47
(semver)
Affected: 1.11.605 , < 1.11.605 (semver) Affected: 1.19.325 , < 1.19.325 (semver) Affected: 1.21.835 , < 1.21.835 (semver) Affected: 1.22.1199 , < 1.22.1199 (semver) Affected: 1.23.766 , < 1.23.766 (semver) Affected: 1.24.590 , < 1.24.590 (semver) |
Date Public
2026-10-27 17:26
{
"containers": {
"cna": {
"affected": [
{
"product": "Endpoint Configuration Toolset Solution",
"vendor": "Tanium",
"versions": [
{
"lessThan": "1.51.60",
"status": "affected",
"version": "1.51",
"versionType": "custom"
},
{
"lessThan": "1.59.50",
"status": "affected",
"version": "1.59",
"versionType": "custom"
},
{
"lessThan": "1.71.25",
"status": "affected",
"version": "1.71",
"versionType": "custom"
}
]
},
{
"product": "end-user-cx",
"vendor": "Tanium",
"versions": [
{
"lessThan": "1.8.47",
"status": "affected",
"version": "1.8.47",
"versionType": "semver"
},
{
"lessThan": "1.11.605",
"status": "affected",
"version": "1.11.605",
"versionType": "semver"
},
{
"lessThan": "1.19.325",
"status": "affected",
"version": "1.19.325",
"versionType": "semver"
},
{
"lessThan": "1.21.835",
"status": "affected",
"version": "1.21.835",
"versionType": "semver"
},
{
"lessThan": "1.22.1199",
"status": "affected",
"version": "1.22.1199",
"versionType": "semver"
},
{
"lessThan": "1.23.766",
"status": "affected",
"version": "1.23.766",
"versionType": "semver"
},
{
"lessThan": "1.24.590",
"status": "affected",
"version": "1.24.590",
"versionType": "semver"
}
]
}
],
"dateAssigned": "2026-10-09T19:21:25.468Z",
"datePublic": "2026-10-27T17:26:19.759Z",
"descriptions": [
{
"lang": "en",
"value": "Tanium addressed a local privilege escalation vulnerability in End-User Notifications."
}
],
"metrics": [
{
"cvssV3_1": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-59",
"description": "Improper Link Resolution Before File Access (\u0027Link Following\u0027)",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-10-27T17:35:42.154Z",
"orgId": "3938794e-25f5-4123-a1ba-5cbd7f104512",
"shortName": "Tanium"
},
"references": [
{
"name": "TAN-2026-065",
"url": "https://security.tanium.com/TAN-2026-065"
}
],
"title": "Tanium addressed a local privilege escalation vulnerability in End-User Notifications."
}
},
"cveMetadata": {
"assignerOrgId": "3938794e-25f5-4123-a1ba-5cbd7f104512",
"assignerShortName": "Tanium",
"cveId": "CVE-2026-108306",
"datePublished": "2026-10-27T17:35:42.154Z",
"dateReserved": "2026-10-09T19:21:25.635Z",
"dateUpdated": "2026-10-27T17:35:42.154Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-108329 (GCVE-0-2026-108329)
Vulnerability from cvelistv5 – Published: 2026-10-27 17:35 – Updated: 2026-10-27 17:35
VLAI
EPSS
VEX
Title
Tanium addressed an unauthorized code execution vulnerability in Threat Response.
Summary
Tanium addressed an unauthorized code execution vulnerability in Threat Response.
Severity
8.8 (High)
CWE
- CWE-77 - Improper Neutralization of Special Elements used in a Command ('Command Injection')
Assigner
References
1 reference
Impacted products
1 product
| Vendor | Product | Version | |
|---|---|---|---|
| Tanium | Threat Response |
Affected:
4.9 , < 4.9.476
(custom)
Affected: 4.12 , < 4.12.349 (custom) Affected: 4.17 , < 4.17.327 (custom) |
Date Public
2026-10-27 17:26
{
"containers": {
"cna": {
"affected": [
{
"product": "Threat Response",
"vendor": "Tanium",
"versions": [
{
"lessThan": "4.9.476",
"status": "affected",
"version": "4.9",
"versionType": "custom"
},
{
"lessThan": "4.12.349",
"status": "affected",
"version": "4.12",
"versionType": "custom"
},
{
"lessThan": "4.17.327",
"status": "affected",
"version": "4.17",
"versionType": "custom"
}
]
}
],
"dateAssigned": "2026-10-09T19:21:33.643Z",
"datePublic": "2026-10-27T17:26:19.471Z",
"descriptions": [
{
"lang": "en",
"value": "Tanium addressed an unauthorized code execution vulnerability in Threat Response."
}
],
"metrics": [
{
"cvssV3_1": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-77",
"description": "Improper Neutralization of Special Elements used in a Command (\u0027Command Injection\u0027)",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-10-27T17:35:41.970Z",
"orgId": "3938794e-25f5-4123-a1ba-5cbd7f104512",
"shortName": "Tanium"
},
"references": [
{
"name": "TAN-2026-064",
"url": "https://security.tanium.com/TAN-2026-064"
}
],
"title": "Tanium addressed an unauthorized code execution vulnerability in Threat Response."
}
},
"cveMetadata": {
"assignerOrgId": "3938794e-25f5-4123-a1ba-5cbd7f104512",
"assignerShortName": "Tanium",
"cveId": "CVE-2026-108329",
"datePublished": "2026-10-27T17:35:41.970Z",
"dateReserved": "2026-10-09T19:21:33.766Z",
"dateUpdated": "2026-10-27T17:35:41.970Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-108332 (GCVE-0-2026-108332)
Vulnerability from cvelistv5 – Published: 2026-10-27 17:35 – Updated: 2026-10-27 17:35
VLAI
EPSS
VEX
Title
Tanium addressed an improper link resolution before file access vulnerability in Threat Response Client Extension.
Summary
Tanium addressed an improper link resolution before file access vulnerability in Threat Response Client Extension.
Severity
6.3 (Medium)
CWE
- CWE-59 - Improper Link Resolution Before File Access ('Link Following')
Assigner
References
1 reference
Impacted products
2 products
| Vendor | Product | Version | |
|---|---|---|---|
| Tanium | Endpoint Configuration Toolset Solution |
Affected:
1.51.0 , < 1.51.60
(custom)
Affected: 1.59.0 , < 1.59.50 (custom) Affected: 1.71.0 , < 1.71.25 (custom) |
|
| Tanium | threat-response-cx |
Affected:
1.17.802 , < 1.17.802
(semver)
Affected: 1.18.2732 , < 1.18.2732 (semver) Affected: 1.19.2213 , < 1.19.2213 (semver) Affected: 1.20.2271 , < 1.20.2271 (semver) Affected: 1.21.1673 , < 1.21.1673 (semver) |
Date Public
2026-10-27 17:26
{
"containers": {
"cna": {
"affected": [
{
"product": "Endpoint Configuration Toolset Solution",
"vendor": "Tanium",
"versions": [
{
"lessThan": "1.51.60",
"status": "affected",
"version": "1.51.0",
"versionType": "custom"
},
{
"lessThan": "1.59.50",
"status": "affected",
"version": "1.59.0",
"versionType": "custom"
},
{
"lessThan": "1.71.25",
"status": "affected",
"version": "1.71.0",
"versionType": "custom"
}
]
},
{
"product": "threat-response-cx",
"vendor": "Tanium",
"versions": [
{
"lessThan": "1.17.802",
"status": "affected",
"version": "1.17.802",
"versionType": "semver"
},
{
"lessThan": "1.18.2732",
"status": "affected",
"version": "1.18.2732",
"versionType": "semver"
},
{
"lessThan": "1.19.2213",
"status": "affected",
"version": "1.19.2213",
"versionType": "semver"
},
{
"lessThan": "1.20.2271",
"status": "affected",
"version": "1.20.2271",
"versionType": "semver"
},
{
"lessThan": "1.21.1673",
"status": "affected",
"version": "1.21.1673",
"versionType": "semver"
}
]
}
],
"dateAssigned": "2026-10-09T19:21:34.683Z",
"datePublic": "2026-10-27T17:26:16.663Z",
"descriptions": [
{
"lang": "en",
"value": "Tanium addressed an improper link resolution before file access vulnerability in Threat Response Client Extension."
}
],
"metrics": [
{
"cvssV3_1": {
"baseScore": 6.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:N",
"version": "3.1"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-59",
"description": "Improper Link Resolution Before File Access (\u0027Link Following\u0027)",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-10-27T17:35:41.790Z",
"orgId": "3938794e-25f5-4123-a1ba-5cbd7f104512",
"shortName": "Tanium"
},
"references": [
{
"name": "TAN-2026-055",
"url": "https://security.tanium.com/TAN-2026-055"
}
],
"title": "Tanium addressed an improper link resolution before file access vulnerability in Threat Response Client Extension."
}
},
"cveMetadata": {
"assignerOrgId": "3938794e-25f5-4123-a1ba-5cbd7f104512",
"assignerShortName": "Tanium",
"cveId": "CVE-2026-108332",
"datePublished": "2026-10-27T17:35:41.790Z",
"dateReserved": "2026-10-09T19:21:34.846Z",
"dateUpdated": "2026-10-27T17:35:41.790Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-108301 (GCVE-0-2026-108301)
Vulnerability from cvelistv5 – Published: 2026-10-27 17:35 – Updated: 2026-10-27 17:35
VLAI
EPSS
VEX
Title
Tanium addressed an improper access controls vulnerability in Comply.
Summary
Tanium addressed an improper access controls vulnerability in Comply.
Severity
6 (Medium)
CWE
- CWE-862 - Missing Authorization
Assigner
References
1 reference
Impacted products
Date Public
2026-10-27 17:26
{
"containers": {
"cna": {
"affected": [
{
"product": "Comply",
"vendor": "Tanium",
"versions": [
{
"lessThan": "2.32.263",
"status": "affected",
"version": "2.32",
"versionType": "custom"
},
{
"lessThan": "2.35.323",
"status": "affected",
"version": "2.35",
"versionType": "custom"
},
{
"lessThan": "2.37.326",
"status": "affected",
"version": "2.37",
"versionType": "custom"
}
]
}
],
"dateAssigned": "2026-10-09T19:20:54.787Z",
"datePublic": "2026-10-27T17:26:20.033Z",
"descriptions": [
{
"lang": "en",
"value": "Tanium addressed an improper access controls vulnerability in Comply."
}
],
"metrics": [
{
"cvssV3_1": {
"baseScore": 6,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:L/I:L/A:L",
"version": "3.1"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-862",
"description": "Missing Authorization",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-10-27T17:35:24.243Z",
"orgId": "3938794e-25f5-4123-a1ba-5cbd7f104512",
"shortName": "Tanium"
},
"references": [
{
"name": "TAN-2026-066",
"url": "https://security.tanium.com/TAN-2026-066"
}
],
"title": "Tanium addressed an improper access controls vulnerability in Comply."
}
},
"cveMetadata": {
"assignerOrgId": "3938794e-25f5-4123-a1ba-5cbd7f104512",
"assignerShortName": "Tanium",
"cveId": "CVE-2026-108301",
"datePublished": "2026-10-27T17:35:24.243Z",
"dateReserved": "2026-10-09T19:20:55.306Z",
"dateUpdated": "2026-10-27T17:35:24.243Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-108304 (GCVE-0-2026-108304)
Vulnerability from cvelistv5 – Published: 2026-10-27 17:35 – Updated: 2026-10-27 17:35
VLAI
EPSS
VEX
Title
Tanium addressed a local privilege escalation vulnerability in End-User Notifications.
Summary
Tanium addressed a local privilege escalation vulnerability in End-User Notifications.
Severity
7.8 (High)
CWE
Assigner
References
1 reference
Impacted products
2 products
| Vendor | Product | Version | |
|---|---|---|---|
| Tanium | Endpoint Configuration Toolset Solution |
Affected:
1.51 , < 1.51.60
(custom)
Affected: 1.59 , < 1.59.50 (custom) Affected: 1.71 , < 1.71.25 (custom) |
|
| Tanium | end-user-cx |
Affected:
1.8.47 , < 1.8.47
(semver)
Affected: 1.11.605 , < 1.11.605 (semver) Affected: 1.19.325 , < 1.19.325 (semver) Affected: 1.21.835 , < 1.21.835 (semver) Affected: 1.22.1199 , < 1.22.1199 (semver) Affected: 1.23.766 , < 1.23.766 (semver) Affected: 1.24.590 , < 1.24.590 (semver) |
Date Public
2026-10-27 17:26
{
"containers": {
"cna": {
"affected": [
{
"product": "Endpoint Configuration Toolset Solution",
"vendor": "Tanium",
"versions": [
{
"lessThan": "1.51.60",
"status": "affected",
"version": "1.51",
"versionType": "custom"
},
{
"lessThan": "1.59.50",
"status": "affected",
"version": "1.59",
"versionType": "custom"
},
{
"lessThan": "1.71.25",
"status": "affected",
"version": "1.71",
"versionType": "custom"
}
]
},
{
"product": "end-user-cx",
"vendor": "Tanium",
"versions": [
{
"lessThan": "1.8.47",
"status": "affected",
"version": "1.8.47",
"versionType": "semver"
},
{
"lessThan": "1.11.605",
"status": "affected",
"version": "1.11.605",
"versionType": "semver"
},
{
"lessThan": "1.19.325",
"status": "affected",
"version": "1.19.325",
"versionType": "semver"
},
{
"lessThan": "1.21.835",
"status": "affected",
"version": "1.21.835",
"versionType": "semver"
},
{
"lessThan": "1.22.1199",
"status": "affected",
"version": "1.22.1199",
"versionType": "semver"
},
{
"lessThan": "1.23.766",
"status": "affected",
"version": "1.23.766",
"versionType": "semver"
},
{
"lessThan": "1.24.590",
"status": "affected",
"version": "1.24.590",
"versionType": "semver"
}
]
}
],
"dateAssigned": "2026-10-09T19:21:24.751Z",
"datePublic": "2026-10-27T17:26:17.500Z",
"descriptions": [
{
"lang": "en",
"value": "Tanium addressed a local privilege escalation vulnerability in End-User Notifications."
}
],
"metrics": [
{
"cvssV3_1": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-59",
"description": "Improper Link Resolution Before File Access (\u0027Link Following\u0027)",
"lang": "en",
"type": "CWE"
}
]
},
{
"descriptions": [
{
"cweId": "CWE-282",
"description": "Improper Ownership Management",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-10-27T17:35:24.064Z",
"orgId": "3938794e-25f5-4123-a1ba-5cbd7f104512",
"shortName": "Tanium"
},
"references": [
{
"name": "TAN-2026-058",
"url": "https://security.tanium.com/TAN-2026-058"
}
],
"title": "Tanium addressed a local privilege escalation vulnerability in End-User Notifications."
}
},
"cveMetadata": {
"assignerOrgId": "3938794e-25f5-4123-a1ba-5cbd7f104512",
"assignerShortName": "Tanium",
"cveId": "CVE-2026-108304",
"datePublished": "2026-10-27T17:35:24.064Z",
"dateReserved": "2026-10-09T19:21:24.929Z",
"dateUpdated": "2026-10-27T17:35:24.064Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-87086 (GCVE-0-2026-87086)
Vulnerability from cvelistv5 – Published: 2026-10-27 17:35 – Updated: 2026-10-27 17:35
VLAI
EPSS
VEX
Title
Tanium addressed a denial of service vulnerability in Provision.
Summary
Tanium addressed a denial of service vulnerability in Provision.
Severity
7.5 (High)
CWE
- CWE-690 - Unchecked Return Value to NULL Pointer Dereference
Assigner
References
1 reference
Impacted products
Date Public
2026-10-27 17:26
{
"containers": {
"cna": {
"affected": [
{
"product": "Provision",
"vendor": "Tanium",
"versions": [
{
"lessThan": "1.17.150",
"status": "affected",
"version": "1.17",
"versionType": "custom"
},
{
"lessThan": "1.23.161",
"status": "affected",
"version": "1.23",
"versionType": "custom"
},
{
"lessThan": "1.24.199",
"status": "affected",
"version": "1.24",
"versionType": "custom"
}
]
}
],
"dateAssigned": "2026-09-08T19:38:21.409Z",
"datePublic": "2026-10-27T17:26:22.493Z",
"descriptions": [
{
"lang": "en",
"value": "Tanium addressed a denial of service vulnerability in Provision."
}
],
"metrics": [
{
"cvssV3_1": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-690",
"description": "Unchecked Return Value to NULL Pointer Dereference",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-10-27T17:35:23.877Z",
"orgId": "3938794e-25f5-4123-a1ba-5cbd7f104512",
"shortName": "Tanium"
},
"references": [
{
"name": "TAN-2026-080",
"url": "https://security.tanium.com/TAN-2026-080"
}
],
"title": "Tanium addressed a denial of service vulnerability in Provision."
}
},
"cveMetadata": {
"assignerOrgId": "3938794e-25f5-4123-a1ba-5cbd7f104512",
"assignerShortName": "Tanium",
"cveId": "CVE-2026-87086",
"datePublished": "2026-10-27T17:35:23.877Z",
"dateReserved": "2026-09-08T19:38:21.885Z",
"dateUpdated": "2026-10-27T17:35:23.877Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-108309 (GCVE-0-2026-108309)
Vulnerability from cvelistv5 – Published: 2026-10-27 17:35 – Updated: 2026-10-27 17:35
VLAI
EPSS
VEX
Title
Tanium addressed an uncontrolled resource consumption vulnerability in Performance Client Extension.
Summary
Tanium addressed an uncontrolled resource consumption vulnerability in Performance Client Extension.
Severity
5.5 (Medium)
CWE
- CWE-770 - Allocation of Resources Without Limits or Throttling
Assigner
References
1 reference
Impacted products
2 products
| Vendor | Product | Version | |
|---|---|---|---|
| Tanium | Endpoint Configuration Toolset Solution |
Affected:
1.51 , < 1.51.60
(custom)
Affected: 1.59 , < 1.59.50 (custom) Affected: 1.71 , < 1.71.25 (custom) |
|
| Tanium | performance-cx |
Affected:
2.7.648 , < 2.7.648
(semver)
Affected: 2.8.2110 , < 2.8.2110 (semver) Affected: 2.9.1165 , < 2.9.1165 (semver) Affected: 2.11.1312 , < 2.11.1312 (semver) Affected: 2.13.1010 , < 2.13.1010 (semver) Affected: 2.14.56 , < 2.14.56 (semver) |
Date Public
2026-10-27 17:26
{
"containers": {
"cna": {
"affected": [
{
"product": "Endpoint Configuration Toolset Solution",
"vendor": "Tanium",
"versions": [
{
"lessThan": "1.51.60",
"status": "affected",
"version": "1.51",
"versionType": "custom"
},
{
"lessThan": "1.59.50",
"status": "affected",
"version": "1.59",
"versionType": "custom"
},
{
"lessThan": "1.71.25",
"status": "affected",
"version": "1.71",
"versionType": "custom"
}
]
},
{
"product": "performance-cx",
"vendor": "Tanium",
"versions": [
{
"lessThan": "2.7.648",
"status": "affected",
"version": "2.7.648",
"versionType": "semver"
},
{
"lessThan": "2.8.2110",
"status": "affected",
"version": "2.8.2110",
"versionType": "semver"
},
{
"lessThan": "2.9.1165",
"status": "affected",
"version": "2.9.1165",
"versionType": "semver"
},
{
"lessThan": "2.11.1312",
"status": "affected",
"version": "2.11.1312",
"versionType": "semver"
},
{
"lessThan": "2.13.1010",
"status": "affected",
"version": "2.13.1010",
"versionType": "semver"
},
{
"lessThan": "2.14.56",
"status": "affected",
"version": "2.14.56",
"versionType": "semver"
}
]
}
],
"dateAssigned": "2026-10-09T19:21:26.548Z",
"datePublic": "2026-10-27T17:26:21.130Z",
"descriptions": [
{
"lang": "en",
"value": "Tanium addressed an uncontrolled resource consumption vulnerability in Performance Client Extension."
}
],
"metrics": [
{
"cvssV3_1": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-770",
"description": "Allocation of Resources Without Limits or Throttling",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-10-27T17:35:23.693Z",
"orgId": "3938794e-25f5-4123-a1ba-5cbd7f104512",
"shortName": "Tanium"
},
"references": [
{
"name": "TAN-2026-070",
"url": "https://security.tanium.com/TAN-2026-070"
}
],
"title": "Tanium addressed an uncontrolled resource consumption vulnerability in Performance Client Extension."
}
},
"cveMetadata": {
"assignerOrgId": "3938794e-25f5-4123-a1ba-5cbd7f104512",
"assignerShortName": "Tanium",
"cveId": "CVE-2026-108309",
"datePublished": "2026-10-27T17:35:23.693Z",
"dateReserved": "2026-10-09T19:21:26.706Z",
"dateUpdated": "2026-10-27T17:35:23.693Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-116658 (GCVE-0-2026-116658)
Vulnerability from cvelistv5 – Published: 2026-10-27 17:35 – Updated: 2026-10-27 17:35
VLAI
EPSS
VEX
Title
Tanium addressed a denial of service vulnerability in Enforce.
Summary
Tanium addressed a denial of service vulnerability in Enforce.
Severity
6.5 (Medium)
CWE
- CWE-476 - NULL Pointer Dereference
Assigner
References
1 reference
Impacted products
Date Public
2026-10-27 17:26
{
"containers": {
"cna": {
"affected": [
{
"product": "Enforce",
"vendor": "Tanium",
"versions": [
{
"lessThan": "2.9.736",
"status": "affected",
"version": "2.9",
"versionType": "custom"
},
{
"lessThan": "2.10.778",
"status": "affected",
"version": "2.10",
"versionType": "custom"
},
{
"lessThan": "3.0.373",
"status": "affected",
"version": "3.0",
"versionType": "custom"
}
]
}
],
"dateAssigned": "2026-10-26T19:15:07.095Z",
"datePublic": "2026-10-27T17:26:22.232Z",
"descriptions": [
{
"lang": "en",
"value": "Tanium addressed a denial of service vulnerability in Enforce."
}
],
"metrics": [
{
"cvssV3_1": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-476",
"description": "NULL Pointer Dereference",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-10-27T17:35:23.506Z",
"orgId": "3938794e-25f5-4123-a1ba-5cbd7f104512",
"shortName": "Tanium"
},
"references": [
{
"name": "TAN-2026-074",
"url": "https://security.tanium.com/TAN-2026-074"
}
],
"title": "Tanium addressed a denial of service vulnerability in Enforce."
}
},
"cveMetadata": {
"assignerOrgId": "3938794e-25f5-4123-a1ba-5cbd7f104512",
"assignerShortName": "Tanium",
"cveId": "CVE-2026-116658",
"datePublished": "2026-10-27T17:35:23.506Z",
"dateReserved": "2026-10-26T19:15:07.239Z",
"dateUpdated": "2026-10-27T17:35:23.506Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-108313 (GCVE-0-2026-108313)
Vulnerability from cvelistv5 – Published: 2026-10-27 17:35 – Updated: 2026-10-27 17:35
VLAI
EPSS
VEX
Title
Tanium addressed an incorrect privilege assignment vulnerability in Tanium Server.
Summary
Tanium addressed an incorrect privilege assignment vulnerability in Tanium Server.
Severity
6.6 (Medium)
CWE
- CWE-178 - Improper Handling of Case Sensitivity
Assigner
References
1 reference
Impacted products
1 product
| Vendor | Product | Version | |
|---|---|---|---|
| Tanium | Tanium Server |
Affected:
7.7.3 , < 7.7.3.8351
(custom)
Affected: 7.8.2 , < 7.8.2.1263 (custom) Affected: 7.8.4 , < 7.8.4.1399 (custom) |
Date Public
2026-10-27 17:26
{
"containers": {
"cna": {
"affected": [
{
"product": "Tanium Server",
"vendor": "Tanium",
"versions": [
{
"lessThan": "7.7.3.8351",
"status": "affected",
"version": "7.7.3",
"versionType": "custom"
},
{
"lessThan": "7.8.2.1263",
"status": "affected",
"version": "7.8.2",
"versionType": "custom"
},
{
"lessThan": "7.8.4.1399",
"status": "affected",
"version": "7.8.4",
"versionType": "custom"
}
]
}
],
"dateAssigned": "2026-10-09T19:21:27.945Z",
"datePublic": "2026-10-27T17:26:16.384Z",
"descriptions": [
{
"lang": "en",
"value": "Tanium addressed an incorrect privilege assignment vulnerability in Tanium Server."
}
],
"metrics": [
{
"cvssV3_1": {
"baseScore": 6.6,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-178",
"description": "Improper Handling of Case Sensitivity",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-10-27T17:35:06.612Z",
"orgId": "3938794e-25f5-4123-a1ba-5cbd7f104512",
"shortName": "Tanium"
},
"references": [
{
"name": "TAN-2026-054",
"url": "https://security.tanium.com/TAN-2026-054"
}
],
"title": "Tanium addressed an incorrect privilege assignment vulnerability in Tanium Server."
}
},
"cveMetadata": {
"assignerOrgId": "3938794e-25f5-4123-a1ba-5cbd7f104512",
"assignerShortName": "Tanium",
"cveId": "CVE-2026-108313",
"datePublished": "2026-10-27T17:35:06.612Z",
"dateReserved": "2026-10-09T19:21:28.113Z",
"dateUpdated": "2026-10-27T17:35:06.612Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-116649 (GCVE-0-2026-116649)
Vulnerability from cvelistv5 – Published: 2026-10-27 17:35 – Updated: 2026-10-27 17:35
VLAI
EPSS
VEX
Title
Tanium addressed an improper output sanitization vulnerability in Enforce.
Summary
Tanium addressed an improper output sanitization vulnerability in Enforce.
Severity
7.1 (High)
CWE
- CWE-1236 - Improper Neutralization of Formula Elements in a CSV File
Assigner
References
1 reference
Impacted products
Date Public
2026-10-27 17:26
{
"containers": {
"cna": {
"affected": [
{
"product": "Enforce",
"vendor": "Tanium",
"versions": [
{
"lessThan": "2.9.736",
"status": "affected",
"version": "2.9",
"versionType": "custom"
},
{
"lessThan": "2.10.778",
"status": "affected",
"version": "2.10",
"versionType": "custom"
},
{
"lessThan": "3.0.373",
"status": "affected",
"version": "3.0",
"versionType": "custom"
}
]
}
],
"dateAssigned": "2026-10-26T19:15:03.481Z",
"datePublic": "2026-10-27T17:26:21.674Z",
"descriptions": [
{
"lang": "en",
"value": "Tanium addressed an improper output sanitization vulnerability in Enforce."
}
],
"metrics": [
{
"cvssV3_1": {
"baseScore": 7.1,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L",
"version": "3.1"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-1236",
"description": "Improper Neutralization of Formula Elements in a CSV File",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-10-27T17:35:06.420Z",
"orgId": "3938794e-25f5-4123-a1ba-5cbd7f104512",
"shortName": "Tanium"
},
"references": [
{
"name": "TAN-2026-072",
"url": "https://security.tanium.com/TAN-2026-072"
}
],
"title": "Tanium addressed an improper output sanitization vulnerability in Enforce."
}
},
"cveMetadata": {
"assignerOrgId": "3938794e-25f5-4123-a1ba-5cbd7f104512",
"assignerShortName": "Tanium",
"cveId": "CVE-2026-116649",
"datePublished": "2026-10-27T17:35:06.420Z",
"dateReserved": "2026-10-26T19:15:03.641Z",
"dateUpdated": "2026-10-27T17:35:06.420Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-116647 (GCVE-0-2026-116647)
Vulnerability from cvelistv5 – Published: 2026-10-27 17:35 – Updated: 2026-10-27 17:35
VLAI
EPSS
VEX
Title
Tanium addressed an improper output sanitization vulnerability in Comply.
Summary
Tanium addressed an improper output sanitization vulnerability in Comply.
Severity
7.1 (High)
CWE
- CWE-1236 - Improper Neutralization of Formula Elements in a CSV File
Assigner
References
1 reference
Impacted products
Date Public
2026-10-27 17:26
{
"containers": {
"cna": {
"affected": [
{
"product": "Comply",
"vendor": "Tanium",
"versions": [
{
"lessThan": "2.32.263",
"status": "affected",
"version": "2.32",
"versionType": "custom"
},
{
"lessThan": "2.35.323",
"status": "affected",
"version": "2.35",
"versionType": "custom"
},
{
"lessThan": "2.37.326",
"status": "affected",
"version": "2.37",
"versionType": "custom"
}
]
}
],
"dateAssigned": "2026-10-26T19:15:02.679Z",
"datePublic": "2026-10-27T17:26:20.848Z",
"descriptions": [
{
"lang": "en",
"value": "Tanium addressed an improper output sanitization vulnerability in Comply."
}
],
"metrics": [
{
"cvssV3_1": {
"baseScore": 7.1,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L",
"version": "3.1"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-1236",
"description": "Improper Neutralization of Formula Elements in a CSV File",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-10-27T17:35:06.241Z",
"orgId": "3938794e-25f5-4123-a1ba-5cbd7f104512",
"shortName": "Tanium"
},
"references": [
{
"name": "TAN-2026-069",
"url": "https://security.tanium.com/TAN-2026-069"
}
],
"title": "Tanium addressed an improper output sanitization vulnerability in Comply."
}
},
"cveMetadata": {
"assignerOrgId": "3938794e-25f5-4123-a1ba-5cbd7f104512",
"assignerShortName": "Tanium",
"cveId": "CVE-2026-116647",
"datePublished": "2026-10-27T17:35:06.241Z",
"dateReserved": "2026-10-26T19:15:02.873Z",
"dateUpdated": "2026-10-27T17:35:06.241Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-116660 (GCVE-0-2026-116660)
Vulnerability from cvelistv5 – Published: 2026-10-27 17:35 – Updated: 2026-10-27 17:35
VLAI
EPSS
VEX
Title
Tanium addressed an improper access controls vulnerability in Enforce.
Summary
Tanium addressed an improper access controls vulnerability in Enforce.
Severity
4.3 (Medium)
CWE
- CWE-862 - Missing Authorization
Assigner
References
1 reference
Impacted products
Date Public
2026-10-27 17:26
{
"containers": {
"cna": {
"affected": [
{
"product": "Enforce",
"vendor": "Tanium",
"versions": [
{
"lessThan": "2.9.736",
"status": "affected",
"version": "2.9",
"versionType": "custom"
},
{
"lessThan": "2.10.778",
"status": "affected",
"version": "2.10",
"versionType": "custom"
},
{
"lessThan": "3.0.373",
"status": "affected",
"version": "3.0",
"versionType": "custom"
}
]
}
],
"dateAssigned": "2026-10-26T19:15:07.845Z",
"datePublic": "2026-10-27T17:26:23.885Z",
"descriptions": [
{
"lang": "en",
"value": "Tanium addressed an improper access controls vulnerability in Enforce."
}
],
"metrics": [
{
"cvssV3_1": {
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
"version": "3.1"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-862",
"description": "Missing Authorization",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-10-27T17:35:06.053Z",
"orgId": "3938794e-25f5-4123-a1ba-5cbd7f104512",
"shortName": "Tanium"
},
"references": [
{
"name": "TAN-2026-079",
"url": "https://security.tanium.com/TAN-2026-079"
}
],
"title": "Tanium addressed an improper access controls vulnerability in Enforce."
}
},
"cveMetadata": {
"assignerOrgId": "3938794e-25f5-4123-a1ba-5cbd7f104512",
"assignerShortName": "Tanium",
"cveId": "CVE-2026-116660",
"datePublished": "2026-10-27T17:35:06.053Z",
"dateReserved": "2026-10-26T19:15:07.998Z",
"dateUpdated": "2026-10-27T17:35:06.053Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-108326 (GCVE-0-2026-108326)
Vulnerability from cvelistv5 – Published: 2026-10-27 17:35 – Updated: 2026-10-27 17:35
VLAI
EPSS
VEX
Title
Tanium addressed an improper certificate validation vulnerability in Stream Client Extension.
Summary
Tanium addressed an improper certificate validation vulnerability in Stream Client Extension.
Severity
6.5 (Medium)
CWE
- CWE-295 - Improper Certificate Validation
Assigner
References
1 reference
Impacted products
2 products
| Vendor | Product | Version | |
|---|---|---|---|
| Tanium | Endpoint Configuration Toolset Solution |
Affected:
1.51 , < 1.51.60
(custom)
Affected: 1.59 , < 1.59.50 (custom) Affected: 1.71 , < 1.71.25 (custom) |
|
| Tanium | cx-stream |
Affected:
2.4.1184 , < 2.4.1184
(semver)
Affected: 2.7.1160 , < 2.7.1160 (semver) Affected: 2.8.1465 , < 2.8.1465 (semver) Affected: 2.9.561 , < 2.9.561 (semver) |
Date Public
2026-10-27 17:26
{
"containers": {
"cna": {
"affected": [
{
"product": "Endpoint Configuration Toolset Solution",
"vendor": "Tanium",
"versions": [
{
"lessThan": "1.51.60",
"status": "affected",
"version": "1.51",
"versionType": "custom"
},
{
"lessThan": "1.59.50",
"status": "affected",
"version": "1.59",
"versionType": "custom"
},
{
"lessThan": "1.71.25",
"status": "affected",
"version": "1.71",
"versionType": "custom"
}
]
},
{
"product": "cx-stream",
"vendor": "Tanium",
"versions": [
{
"lessThan": "2.4.1184",
"status": "affected",
"version": "2.4.1184",
"versionType": "semver"
},
{
"lessThan": "2.7.1160",
"status": "affected",
"version": "2.7.1160",
"versionType": "semver"
},
{
"lessThan": "2.8.1465",
"status": "affected",
"version": "2.8.1465",
"versionType": "semver"
},
{
"lessThan": "2.9.561",
"status": "affected",
"version": "2.9.561",
"versionType": "semver"
}
]
}
],
"dateAssigned": "2026-10-09T19:21:32.598Z",
"datePublic": "2026-10-27T17:26:18.042Z",
"descriptions": [
{
"lang": "en",
"value": "Tanium addressed an improper certificate validation vulnerability in Stream Client Extension."
}
],
"metrics": [
{
"cvssV3_1": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:L",
"version": "3.1"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-295",
"description": "Improper Certificate Validation",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-10-27T17:35:05.870Z",
"orgId": "3938794e-25f5-4123-a1ba-5cbd7f104512",
"shortName": "Tanium"
},
"references": [
{
"name": "TAN-2026-060",
"url": "https://security.tanium.com/TAN-2026-060"
}
],
"title": "Tanium addressed an improper certificate validation vulnerability in Stream Client Extension."
}
},
"cveMetadata": {
"assignerOrgId": "3938794e-25f5-4123-a1ba-5cbd7f104512",
"assignerShortName": "Tanium",
"cveId": "CVE-2026-108326",
"datePublished": "2026-10-27T17:35:05.870Z",
"dateReserved": "2026-10-09T19:21:32.766Z",
"dateUpdated": "2026-10-27T17:35:05.870Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-108330 (GCVE-0-2026-108330)
Vulnerability from cvelistv5 – Published: 2026-10-27 17:35 – Updated: 2026-10-27 17:35
VLAI
EPSS
VEX
Title
Tanium addressed an information disclosure vulnerability in Threat Response Client Extension.
Summary
Tanium addressed an information disclosure vulnerability in Threat Response Client Extension.
Severity
CWE
- CWE-125 - Out-of-bounds Read
Assigner
References
1 reference
Impacted products
2 products
| Vendor | Product | Version | |
|---|---|---|---|
| Tanium | Endpoint Configuration Toolset Solution |
Affected:
1.71.0 , < 1.71.25
(custom)
Affected: 1.59.0 , < 1.59.50 (custom) Affected: 1.51.0 , < 1.51.60 (custom) |
|
| Tanium | threat-response-cx |
Affected:
1.17.802 , < 1.17.802
(semver)
Affected: 1.18.2732 , < 1.18.2732 (semver) Affected: 1.19.2213 , < 1.19.2213 (semver) Affected: 1.20.2271 , < 1.20.2271 (semver) Affected: 1.21.1673 , < 1.21.1673 (semver) |
Date Public
2026-10-27 17:26
{
"containers": {
"cna": {
"affected": [
{
"product": "Endpoint Configuration Toolset Solution",
"vendor": "Tanium",
"versions": [
{
"lessThan": "1.71.25",
"status": "affected",
"version": "1.71.0",
"versionType": "custom"
},
{
"lessThan": "1.59.50",
"status": "affected",
"version": "1.59.0",
"versionType": "custom"
},
{
"lessThan": "1.51.60",
"status": "affected",
"version": "1.51.0",
"versionType": "custom"
}
]
},
{
"product": "threat-response-cx",
"vendor": "Tanium",
"versions": [
{
"lessThan": "1.17.802",
"status": "affected",
"version": "1.17.802",
"versionType": "semver"
},
{
"lessThan": "1.18.2732",
"status": "affected",
"version": "1.18.2732",
"versionType": "semver"
},
{
"lessThan": "1.19.2213",
"status": "affected",
"version": "1.19.2213",
"versionType": "semver"
},
{
"lessThan": "1.20.2271",
"status": "affected",
"version": "1.20.2271",
"versionType": "semver"
},
{
"lessThan": "1.21.1673",
"status": "affected",
"version": "1.21.1673",
"versionType": "semver"
}
]
}
],
"dateAssigned": "2026-10-09T19:21:33.985Z",
"datePublic": "2026-10-27T17:26:16.937Z",
"descriptions": [
{
"lang": "en",
"value": "Tanium addressed an information disclosure vulnerability in Threat Response Client Extension."
}
],
"metrics": [
{
"cvssV3_1": {
"baseScore": 3.6,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:L",
"version": "3.1"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-125",
"description": "Out-of-bounds Read",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-10-27T17:35:05.683Z",
"orgId": "3938794e-25f5-4123-a1ba-5cbd7f104512",
"shortName": "Tanium"
},
"references": [
{
"name": "TAN-2026-056",
"url": "https://security.tanium.com/TAN-2026-056"
}
],
"title": "Tanium addressed an information disclosure vulnerability in Threat Response Client Extension."
}
},
"cveMetadata": {
"assignerOrgId": "3938794e-25f5-4123-a1ba-5cbd7f104512",
"assignerShortName": "Tanium",
"cveId": "CVE-2026-108330",
"datePublished": "2026-10-27T17:35:05.683Z",
"dateReserved": "2026-10-09T19:21:34.110Z",
"dateUpdated": "2026-10-27T17:35:05.683Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-116657 (GCVE-0-2026-116657)
Vulnerability from cvelistv5 – Published: 2026-10-27 17:34 – Updated: 2026-10-27 17:34
VLAI
EPSS
VEX
Title
Tanium addressed a denial of service vulnerability in Enforce.
Summary
Tanium addressed a denial of service vulnerability in Enforce.
Severity
5.3 (Medium)
CWE
- CWE-770 - Allocation of Resources Without Limits or Throttling
Assigner
References
1 reference
Impacted products
Date Public
2026-10-27 17:26
{
"containers": {
"cna": {
"affected": [
{
"product": "Enforce",
"vendor": "Tanium",
"versions": [
{
"lessThan": "2.9.736",
"status": "affected",
"version": "2.9",
"versionType": "custom"
},
{
"lessThan": "2.10.778",
"status": "affected",
"version": "2.10",
"versionType": "custom"
},
{
"lessThan": "3.0.373",
"status": "affected",
"version": "3.0",
"versionType": "custom"
}
]
}
],
"dateAssigned": "2026-10-26T19:15:06.650Z",
"datePublic": "2026-10-27T17:26:15.804Z",
"descriptions": [
{
"lang": "en",
"value": "Tanium addressed a denial of service vulnerability in Enforce."
}
],
"metrics": [
{
"cvssV3_1": {
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
"version": "3.1"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-770",
"description": "Allocation of Resources Without Limits or Throttling",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-10-27T17:34:47.970Z",
"orgId": "3938794e-25f5-4123-a1ba-5cbd7f104512",
"shortName": "Tanium"
},
"references": [
{
"name": "TAN-2026-052",
"url": "https://security.tanium.com/TAN-2026-052"
}
],
"title": "Tanium addressed a denial of service vulnerability in Enforce."
}
},
"cveMetadata": {
"assignerOrgId": "3938794e-25f5-4123-a1ba-5cbd7f104512",
"assignerShortName": "Tanium",
"cveId": "CVE-2026-116657",
"datePublished": "2026-10-27T17:34:47.970Z",
"dateReserved": "2026-10-26T19:15:06.796Z",
"dateUpdated": "2026-10-27T17:34:47.970Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-108333 (GCVE-0-2026-108333)
Vulnerability from cvelistv5 – Published: 2026-10-27 17:33 – Updated: 2026-10-27 17:33
VLAI
EPSS
VEX
Title
Tanium addressed a use-after-free vulnerability in Threat Response Client Extension.
Summary
Tanium addressed a use-after-free vulnerability in Threat Response Client Extension.
Severity
CWE
- CWE-416 - Use After Free
Assigner
References
1 reference
Impacted products
2 products
| Vendor | Product | Version | |
|---|---|---|---|
| Tanium | Endpoint Configuration Toolset Solution |
Affected:
1.51 , < 1.51.60
(custom)
Affected: 1.59 , < 1.59.50 (custom) Affected: 1.71 , < 1.71.25 (custom) |
|
| Tanium | threat-response-cx |
Affected:
1.17.802 , < 1.17.802
(semver)
Affected: 1.18.2732 , < 1.18.2732 (semver) Affected: 1.19.2213 , < 1.19.2213 (semver) Affected: 1.20.2271 , < 1.20.2271 (semver) Affected: 1.21.1673 , < 1.21.1673 (semver) |
Date Public
2026-10-27 17:26
{
"containers": {
"cna": {
"affected": [
{
"product": "Endpoint Configuration Toolset Solution",
"vendor": "Tanium",
"versions": [
{
"lessThan": "1.51.60",
"status": "affected",
"version": "1.51",
"versionType": "custom"
},
{
"lessThan": "1.59.50",
"status": "affected",
"version": "1.59",
"versionType": "custom"
},
{
"lessThan": "1.71.25",
"status": "affected",
"version": "1.71",
"versionType": "custom"
}
]
},
{
"product": "threat-response-cx",
"vendor": "Tanium",
"versions": [
{
"lessThan": "1.17.802",
"status": "affected",
"version": "1.17.802",
"versionType": "semver"
},
{
"lessThan": "1.18.2732",
"status": "affected",
"version": "1.18.2732",
"versionType": "semver"
},
{
"lessThan": "1.19.2213",
"status": "affected",
"version": "1.19.2213",
"versionType": "semver"
},
{
"lessThan": "1.20.2271",
"status": "affected",
"version": "1.20.2271",
"versionType": "semver"
},
{
"lessThan": "1.21.1673",
"status": "affected",
"version": "1.21.1673",
"versionType": "semver"
}
]
}
],
"dateAssigned": "2026-10-09T19:21:35.035Z",
"datePublic": "2026-10-27T17:26:20.572Z",
"descriptions": [
{
"lang": "en",
"value": "Tanium addressed a use-after-free vulnerability in Threat Response Client Extension."
}
],
"metrics": [
{
"cvssV3_1": {
"baseScore": 2.5,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:L",
"version": "3.1"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-416",
"description": "Use After Free",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-10-27T17:33:55.473Z",
"orgId": "3938794e-25f5-4123-a1ba-5cbd7f104512",
"shortName": "Tanium"
},
"references": [
{
"name": "TAN-2026-068",
"url": "https://security.tanium.com/TAN-2026-068"
}
],
"title": "Tanium addressed a use-after-free vulnerability in Threat Response Client Extension."
}
},
"cveMetadata": {
"assignerOrgId": "3938794e-25f5-4123-a1ba-5cbd7f104512",
"assignerShortName": "Tanium",
"cveId": "CVE-2026-108333",
"datePublished": "2026-10-27T17:33:55.473Z",
"dateReserved": "2026-10-09T19:21:35.177Z",
"dateUpdated": "2026-10-27T17:33:55.473Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-108307 (GCVE-0-2026-108307)
Vulnerability from cvelistv5 – Published: 2026-10-27 17:33 – Updated: 2026-10-27 17:33
VLAI
EPSS
VEX
Title
Tanium addressed a heap-based buffer overflow vulnerability in Index.
Summary
Tanium addressed a heap-based buffer overflow vulnerability in Index.
Severity
7.8 (High)
CWE
- CWE-122 - Heap-based Buffer Overflow
Assigner
References
1 reference
Impacted products
2 products
| Vendor | Product | Version | |
|---|---|---|---|
| Tanium | Endpoint Configuration Toolset Solution |
Affected:
1.51 , < 1.51.60
(custom)
Affected: 1.59 , < 1.59.50 (custom) Affected: 1.71 , < 1.71.25 (custom) |
|
| Tanium | index-cx |
Affected:
3.9.520 , < 3.9.520
(semver)
Affected: 3.11.443 , < 3.11.443 (semver) Affected: 3.14.921 , < 3.14.921 (semver) Affected: 3.14.917 , < 3.14.917 (semver) Affected: 3.15.2420 , < 3.15.2420 (semver) Affected: 3.16.984 , < 3.16.984 (semver) |
Date Public
2026-10-27 17:26
{
"containers": {
"cna": {
"affected": [
{
"product": "Endpoint Configuration Toolset Solution",
"vendor": "Tanium",
"versions": [
{
"lessThan": "1.51.60",
"status": "affected",
"version": "1.51",
"versionType": "custom"
},
{
"lessThan": "1.59.50",
"status": "affected",
"version": "1.59",
"versionType": "custom"
},
{
"lessThan": "1.71.25",
"status": "affected",
"version": "1.71",
"versionType": "custom"
}
]
},
{
"product": "index-cx",
"vendor": "Tanium",
"versions": [
{
"lessThan": "3.9.520",
"status": "affected",
"version": "3.9.520",
"versionType": "semver"
},
{
"lessThan": "3.11.443",
"status": "affected",
"version": "3.11.443",
"versionType": "semver"
},
{
"lessThan": "3.14.921",
"status": "affected",
"version": "3.14.921",
"versionType": "semver"
},
{
"lessThan": "3.14.917",
"status": "affected",
"version": "3.14.917",
"versionType": "semver"
},
{
"lessThan": "3.15.2420",
"status": "affected",
"version": "3.15.2420",
"versionType": "semver"
},
{
"lessThan": "3.16.984",
"status": "affected",
"version": "3.16.984",
"versionType": "semver"
}
]
}
],
"dateAssigned": "2026-10-09T19:21:25.812Z",
"datePublic": "2026-10-27T17:26:17.206Z",
"descriptions": [
{
"lang": "en",
"value": "Tanium addressed a heap-based buffer overflow vulnerability in Index."
}
],
"metrics": [
{
"cvssV3_1": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-122",
"description": "Heap-based Buffer Overflow",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-10-27T17:33:55.273Z",
"orgId": "3938794e-25f5-4123-a1ba-5cbd7f104512",
"shortName": "Tanium"
},
"references": [
{
"name": "TAN-2026-057",
"url": "https://security.tanium.com/TAN-2026-057"
}
],
"title": "Tanium addressed a heap-based buffer overflow vulnerability in Index."
}
},
"cveMetadata": {
"assignerOrgId": "3938794e-25f5-4123-a1ba-5cbd7f104512",
"assignerShortName": "Tanium",
"cveId": "CVE-2026-108307",
"datePublished": "2026-10-27T17:33:55.273Z",
"dateReserved": "2026-10-09T19:21:25.936Z",
"dateUpdated": "2026-10-27T17:33:55.273Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-108310 (GCVE-0-2026-108310)
Vulnerability from cvelistv5 – Published: 2026-10-27 17:33 – Updated: 2026-10-27 17:33
VLAI
EPSS
VEX
Title
Tanium addressed a denial of service vulnerability in Tanium Server.
Summary
Tanium addressed a denial of service vulnerability in Tanium Server.
Severity
5.3 (Medium)
CWE
- CWE-770 - Allocation of Resources Without Limits or Throttling
Assigner
References
1 reference
Impacted products
1 product
| Vendor | Product | Version | |
|---|---|---|---|
| Tanium | Tanium Server |
Affected:
7.7.3 , < 7.7.3.8351
(custom)
Affected: 7.8.2 , < 7.8.2.1263 (custom) Affected: 7.8.4 , < 7.8.4.1399 (custom) |
Date Public
2026-10-27 17:26
{
"containers": {
"cna": {
"affected": [
{
"product": "Tanium Server",
"vendor": "Tanium",
"versions": [
{
"lessThan": "7.7.3.8351",
"status": "affected",
"version": "7.7.3",
"versionType": "custom"
},
{
"lessThan": "7.8.2.1263",
"status": "affected",
"version": "7.8.2",
"versionType": "custom"
},
{
"lessThan": "7.8.4.1399",
"status": "affected",
"version": "7.8.4",
"versionType": "custom"
}
]
}
],
"dateAssigned": "2026-10-09T19:21:26.896Z",
"datePublic": "2026-10-27T17:26:23.069Z",
"descriptions": [
{
"lang": "en",
"value": "Tanium addressed a denial of service vulnerability in Tanium Server."
}
],
"metrics": [
{
"cvssV3_1": {
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
"version": "3.1"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-770",
"description": "Allocation of Resources Without Limits or Throttling",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-10-27T17:33:33.737Z",
"orgId": "3938794e-25f5-4123-a1ba-5cbd7f104512",
"shortName": "Tanium"
},
"references": [
{
"name": "TAN-2026-076",
"url": "https://security.tanium.com/TAN-2026-076"
}
],
"title": "Tanium addressed a denial of service vulnerability in Tanium Server."
}
},
"cveMetadata": {
"assignerOrgId": "3938794e-25f5-4123-a1ba-5cbd7f104512",
"assignerShortName": "Tanium",
"cveId": "CVE-2026-108310",
"datePublished": "2026-10-27T17:33:33.737Z",
"dateReserved": "2026-10-09T19:21:27.059Z",
"dateUpdated": "2026-10-27T17:33:33.737Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-116662 (GCVE-0-2026-116662)
Vulnerability from cvelistv5 – Published: 2026-10-27 17:33 – Updated: 2026-10-27 17:33
VLAI
EPSS
VEX
Title
Tanium addressed a compression bomb vulnerability in Enforce.
Summary
Tanium addressed a compression bomb vulnerability in Enforce.
Severity
7.5 (High)
CWE
- CWE-409 - Improper Handling of Highly Compressed Data (Data Amplification)
Assigner
References
1 reference
Impacted products
Date Public
2026-10-27 17:26
{
"containers": {
"cna": {
"affected": [
{
"product": "Enforce",
"vendor": "Tanium",
"versions": [
{
"lessThan": "2.9.736",
"status": "affected",
"version": "2.9",
"versionType": "custom"
},
{
"lessThan": "2.10.778",
"status": "affected",
"version": "2.10",
"versionType": "custom"
},
{
"lessThan": "3.0.373",
"status": "affected",
"version": "3.0",
"versionType": "custom"
}
]
}
],
"dateAssigned": "2026-10-26T19:15:08.602Z",
"datePublic": "2026-10-27T17:26:17.772Z",
"descriptions": [
{
"lang": "en",
"value": "Tanium addressed a compression bomb vulnerability in Enforce."
}
],
"metrics": [
{
"cvssV3_1": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-409",
"description": "Improper Handling of Highly Compressed Data (Data Amplification)",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-10-27T17:33:33.558Z",
"orgId": "3938794e-25f5-4123-a1ba-5cbd7f104512",
"shortName": "Tanium"
},
"references": [
{
"name": "TAN-2026-059",
"url": "https://security.tanium.com/TAN-2026-059"
}
],
"title": "Tanium addressed a compression bomb vulnerability in Enforce."
}
},
"cveMetadata": {
"assignerOrgId": "3938794e-25f5-4123-a1ba-5cbd7f104512",
"assignerShortName": "Tanium",
"cveId": "CVE-2026-116662",
"datePublished": "2026-10-27T17:33:33.558Z",
"dateReserved": "2026-10-26T19:15:08.748Z",
"dateUpdated": "2026-10-27T17:33:33.558Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-108305 (GCVE-0-2026-108305)
Vulnerability from cvelistv5 – Published: 2026-10-27 17:33 – Updated: 2026-10-27 17:33
VLAI
EPSS
VEX
Title
Tanium addressed a local privilege escalation vulnerability in End-User Notifications.
Summary
Tanium addressed a local privilege escalation vulnerability in End-User Notifications.
Severity
7.8 (High)
CWE
- CWE-59 - Improper Link Resolution Before File Access ('Link Following')
Assigner
References
1 reference
Impacted products
2 products
| Vendor | Product | Version | |
|---|---|---|---|
| Tanium | Endpoint Configuration Toolset Solution |
Affected:
1.51 , < 1.51.60
(custom)
Affected: 1.59 , < 1.59.50 (custom) Affected: 1.71 , < 1.71.25 (custom) |
|
| Tanium | end-user-cx |
Affected:
1.8.47 , < 1.8.47
(semver)
Affected: 1.11.605 , < 1.11.605 (semver) Affected: 1.19.325 , < 1.19.325 (semver) Affected: 1.21.835 , < 1.21.835 (semver) Affected: 1.22.1199 , < 1.22.1199 (semver) Affected: 1.23.766 , < 1.23.766 (semver) Affected: 1.24.590 , < 1.24.590 (semver) |
Date Public
2026-10-27 17:26
{
"containers": {
"cna": {
"affected": [
{
"product": "Endpoint Configuration Toolset Solution",
"vendor": "Tanium",
"versions": [
{
"lessThan": "1.51.60",
"status": "affected",
"version": "1.51",
"versionType": "custom"
},
{
"lessThan": "1.59.50",
"status": "affected",
"version": "1.59",
"versionType": "custom"
},
{
"lessThan": "1.71.25",
"status": "affected",
"version": "1.71",
"versionType": "custom"
}
]
},
{
"product": "end-user-cx",
"vendor": "Tanium",
"versions": [
{
"lessThan": "1.8.47",
"status": "affected",
"version": "1.8.47",
"versionType": "semver"
},
{
"lessThan": "1.11.605",
"status": "affected",
"version": "1.11.605",
"versionType": "semver"
},
{
"lessThan": "1.19.325",
"status": "affected",
"version": "1.19.325",
"versionType": "semver"
},
{
"lessThan": "1.21.835",
"status": "affected",
"version": "1.21.835",
"versionType": "semver"
},
{
"lessThan": "1.22.1199",
"status": "affected",
"version": "1.22.1199",
"versionType": "semver"
},
{
"lessThan": "1.23.766",
"status": "affected",
"version": "1.23.766",
"versionType": "semver"
},
{
"lessThan": "1.24.590",
"status": "affected",
"version": "1.24.590",
"versionType": "semver"
}
]
}
],
"dateAssigned": "2026-10-09T19:21:25.115Z",
"datePublic": "2026-10-27T17:26:18.366Z",
"descriptions": [
{
"lang": "en",
"value": "Tanium addressed a local privilege escalation vulnerability in End-User Notifications."
}
],
"metrics": [
{
"cvssV3_1": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-59",
"description": "Improper Link Resolution Before File Access (\u0027Link Following\u0027)",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-10-27T17:33:33.369Z",
"orgId": "3938794e-25f5-4123-a1ba-5cbd7f104512",
"shortName": "Tanium"
},
"references": [
{
"name": "TAN-2026-061",
"url": "https://security.tanium.com/TAN-2026-061"
}
],
"title": "Tanium addressed a local privilege escalation vulnerability in End-User Notifications."
}
},
"cveMetadata": {
"assignerOrgId": "3938794e-25f5-4123-a1ba-5cbd7f104512",
"assignerShortName": "Tanium",
"cveId": "CVE-2026-108305",
"datePublished": "2026-10-27T17:33:33.369Z",
"dateReserved": "2026-10-09T19:21:25.285Z",
"dateUpdated": "2026-10-27T17:33:33.369Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-108331 (GCVE-0-2026-108331)
Vulnerability from cvelistv5 – Published: 2026-10-27 17:32 – Updated: 2026-10-27 17:32
VLAI
EPSS
VEX
Title
Tanium addressed an infinite loop vulnerability in Threat Response Client Extension.
Summary
Tanium addressed an infinite loop vulnerability in Threat Response Client Extension.
Severity
Assigner
References
1 reference
Impacted products
2 products
| Vendor | Product | Version | |
|---|---|---|---|
| Tanium | Endpoint Configuration Toolset Solution |
Affected:
1.71.0 , < 1.71.25
(custom)
Affected: 1.59.0 , < 1.59.50 (custom) Affected: 1.51.0 , < 1.51.60 (custom) |
|
| Tanium | threat-response-cx |
Affected:
1.17.802 , < 1.17.802
(semver)
Affected: 1.18.2732 , < 1.18.2732 (semver) Affected: 1.19.2213 , < 1.19.2213 (semver) Affected: 1.20.2271 , < 1.20.2271 (semver) Affected: 1.21.1673 , < 1.21.1673 (semver) |
Date Public
2026-10-27 17:26
{
"containers": {
"cna": {
"affected": [
{
"product": "Endpoint Configuration Toolset Solution",
"vendor": "Tanium",
"versions": [
{
"lessThan": "1.71.25",
"status": "affected",
"version": "1.71.0",
"versionType": "custom"
},
{
"lessThan": "1.59.50",
"status": "affected",
"version": "1.59.0",
"versionType": "custom"
},
{
"lessThan": "1.51.60",
"status": "affected",
"version": "1.51.0",
"versionType": "custom"
}
]
},
{
"product": "threat-response-cx",
"vendor": "Tanium",
"versions": [
{
"lessThan": "1.17.802",
"status": "affected",
"version": "1.17.802",
"versionType": "semver"
},
{
"lessThan": "1.18.2732",
"status": "affected",
"version": "1.18.2732",
"versionType": "semver"
},
{
"lessThan": "1.19.2213",
"status": "affected",
"version": "1.19.2213",
"versionType": "semver"
},
{
"lessThan": "1.20.2271",
"status": "affected",
"version": "1.20.2271",
"versionType": "semver"
},
{
"lessThan": "1.21.1673",
"status": "affected",
"version": "1.21.1673",
"versionType": "semver"
}
]
}
],
"dateAssigned": "2026-10-09T19:21:34.333Z",
"datePublic": "2026-10-27T17:26:18.901Z",
"descriptions": [
{
"lang": "en",
"value": "Tanium addressed an infinite loop vulnerability in Threat Response Client Extension."
}
],
"metrics": [
{
"cvssV3_1": {
"baseScore": 3.3,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L",
"version": "3.1"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-674",
"description": "Uncontrolled Recursion",
"lang": "en",
"type": "CWE"
}
]
},
{
"descriptions": [
{
"cweId": "CWE-400",
"description": "Uncontrolled Resource Consumption",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-10-27T17:32:07.314Z",
"orgId": "3938794e-25f5-4123-a1ba-5cbd7f104512",
"shortName": "Tanium"
},
"references": [
{
"name": "TAN-2026-063",
"url": "https://security.tanium.com/TAN-2026-063"
}
],
"title": "Tanium addressed an infinite loop vulnerability in Threat Response Client Extension."
}
},
"cveMetadata": {
"assignerOrgId": "3938794e-25f5-4123-a1ba-5cbd7f104512",
"assignerShortName": "Tanium",
"cveId": "CVE-2026-108331",
"datePublished": "2026-10-27T17:32:07.314Z",
"dateReserved": "2026-10-09T19:21:34.494Z",
"dateUpdated": "2026-10-27T17:32:07.314Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-87085 (GCVE-0-2026-87085)
Vulnerability from cvelistv5 – Published: 2026-10-27 17:31 – Updated: 2026-10-27 17:31
VLAI
EPSS
VEX
Title
Tanium addressed a SQL injection vulnerability in Provision.
Summary
Tanium addressed a SQL injection vulnerability in Provision.
Severity
6.5 (Medium)
CWE
- CWE-89 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
Assigner
References
1 reference
Impacted products
Date Public
2026-10-27 17:26
{
"containers": {
"cna": {
"affected": [
{
"product": "Provision",
"vendor": "Tanium",
"versions": [
{
"lessThan": "1.17.150",
"status": "affected",
"version": "1.17",
"versionType": "custom"
},
{
"lessThan": "1.23.161",
"status": "affected",
"version": "1.23",
"versionType": "custom"
},
{
"lessThan": "1.24.199",
"status": "affected",
"version": "1.24",
"versionType": "custom"
}
]
}
],
"dateAssigned": "2026-09-08T19:33:51.251Z",
"datePublic": "2026-10-27T17:26:19.173Z",
"descriptions": [
{
"lang": "en",
"value": "Tanium addressed a SQL injection vulnerability in Provision."
}
],
"metrics": [
{
"cvssV3_1": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
"version": "3.1"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-89",
"description": "Improper Neutralization of Special Elements used in an SQL Command (\u0027SQL Injection\u0027)",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-10-27T17:31:29.433Z",
"orgId": "3938794e-25f5-4123-a1ba-5cbd7f104512",
"shortName": "Tanium"
},
"references": [
{
"name": "TAN-2026-023",
"url": "https://security.tanium.com/TAN-2026-023"
}
],
"title": "Tanium addressed a SQL injection vulnerability in Provision."
}
},
"cveMetadata": {
"assignerOrgId": "3938794e-25f5-4123-a1ba-5cbd7f104512",
"assignerShortName": "Tanium",
"cveId": "CVE-2026-87085",
"datePublished": "2026-10-27T17:31:29.433Z",
"dateReserved": "2026-09-08T19:33:51.677Z",
"dateUpdated": "2026-10-27T17:31:29.433Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-108308 (GCVE-0-2026-108308)
Vulnerability from cvelistv5 – Published: 2026-10-27 17:30 – Updated: 2026-10-27 17:30
VLAI
EPSS
VEX
Title
Tanium addressed a SQL injection vulnerability in Patch.
Summary
Tanium addressed a SQL injection vulnerability in Patch.
Severity
6.5 (Medium)
CWE
- CWE-89 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
Assigner
References
1 reference
Impacted products
Date Public
2026-10-27 17:26
{
"containers": {
"cna": {
"affected": [
{
"product": "Patch",
"vendor": "Tanium",
"versions": [
{
"lessThan": "3.24.306",
"status": "affected",
"version": "3.24",
"versionType": "custom"
},
{
"lessThan": "3.28.325",
"status": "affected",
"version": "3.28",
"versionType": "custom"
},
{
"lessThan": "3.32.353",
"status": "affected",
"version": "3.32",
"versionType": "custom"
}
]
}
],
"dateAssigned": "2026-10-09T19:21:26.199Z",
"datePublic": "2026-10-27T17:26:16.092Z",
"descriptions": [
{
"lang": "en",
"value": "Tanium addressed a SQL injection vulnerability in Patch."
}
],
"metrics": [
{
"cvssV3_1": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
"version": "3.1"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-89",
"description": "Improper Neutralization of Special Elements used in an SQL Command (\u0027SQL Injection\u0027)",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-10-27T17:30:53.396Z",
"orgId": "3938794e-25f5-4123-a1ba-5cbd7f104512",
"shortName": "Tanium"
},
"references": [
{
"name": "TAN-2026-053",
"url": "https://security.tanium.com/TAN-2026-053"
}
],
"title": "Tanium addressed a SQL injection vulnerability in Patch."
}
},
"cveMetadata": {
"assignerOrgId": "3938794e-25f5-4123-a1ba-5cbd7f104512",
"assignerShortName": "Tanium",
"cveId": "CVE-2026-108308",
"datePublished": "2026-10-27T17:30:53.396Z",
"dateReserved": "2026-10-09T19:21:26.384Z",
"dateUpdated": "2026-10-27T17:30:53.396Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}