Vulnerability-Lookup

Search criteria

Vendor

Product

Assigner (CNA or root)

Sources

Sort by

Order

CVSS min

CVSS max

Apply ordering (override relevance)

CVE-2026-116682 (GCVE-0-2026-116682)

Vulnerability from cvelistv5 – Published: 2026-10-27 17:48 – Updated: 2026-10-27 17:48

Title

FileBrowser Quantum: Symlink following escapes user scope allowing arbitrary file read outside the served directory

Summary

FileBrowser Quantum is a free, self-hosted, web-based file manager. Prior to 1.5.2-stable and 2.0.1-beta, file read handling in backend/pkg/indexing/indexingFiles.go resolves symbolic links through GetRealPath without confirming that the resolved target remains inside the source root and the user's authorized scope. Download, preview, media, OnlyOffice, and public-share read flows that enable FollowSymlinks can therefore serve an out-of-scope target through a reachable in-scope symlink. An authenticated user with download access can read server-accessible files outside the assigned scope, and a holder of a public share link can do the same without an account when the shared directory exposes such a symlink. This issue is fixed in 1.5.2-stable and 2.0.1-beta.

Severity

8.6 (High)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N

CWE

CWE-22 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CWE-59 - Improper Link Resolution Before File Access ('Link Following')

Assigner

GitHub_M CNA under the mitre root

CNA scorecard C 72/100 over 7806 records in the last 180 days details

References

7 references

URL	Tags
https://github.com/gtsteffaniak/filebrowser/secur…	x_refsource_CONFIRM
https://github.com/gtsteffaniak/filebrowser/pull/2795	x_refsource_MISC
https://github.com/gtsteffaniak/filebrowser/pull/2800	x_refsource_MISC
https://github.com/gtsteffaniak/filebrowser/commi…	x_refsource_MISC
https://github.com/gtsteffaniak/filebrowser/commi…	x_refsource_MISC
https://github.com/gtsteffaniak/filebrowser/relea…	x_refsource_MISC
https://github.com/gtsteffaniak/filebrowser/relea…	x_refsource_MISC

Impacted products

1 product

Vendor	Product	Version
gtsteffaniak	filebrowser	Affected: < 1.5.2-stable Affected: >= 2.0.0-beta, < 2.0.1-beta

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "cna": {
      "affected": [
        {
          "product": "filebrowser",
          "vendor": "gtsteffaniak",
          "versions": [
            {
              "status": "affected",
              "version": "\u003c 1.5.2-stable"
            },
            {
              "status": "affected",
              "version": "\u003e= 2.0.0-beta, \u003c 2.0.1-beta"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "FileBrowser Quantum is a free, self-hosted, web-based file manager. Prior to 1.5.2-stable and 2.0.1-beta, file read handling in backend/pkg/indexing/indexingFiles.go resolves symbolic links through GetRealPath without confirming that the resolved target remains inside the source root and the user\u0027s authorized scope. Download, preview, media, OnlyOffice, and public-share read flows that enable FollowSymlinks can therefore serve an out-of-scope target through a reachable in-scope symlink. An authenticated user with download access can read server-accessible files outside the assigned scope, and a holder of a public share link can do the same without an account when the shared directory exposes such a symlink. This issue is fixed in 1.5.2-stable and 2.0.1-beta."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 8.6,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "CHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N",
            "version": "3.1"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-22",
              "description": "CWE-22: Improper Limitation of a Pathname to a Restricted Directory (\u0027Path Traversal\u0027)",
              "lang": "en",
              "type": "CWE"
            }
          ]
        },
        {
          "descriptions": [
            {
              "cweId": "CWE-59",
              "description": "CWE-59: Improper Link Resolution Before File Access (\u0027Link Following\u0027)",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-10-27T17:48:04.364Z",
        "orgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
        "shortName": "GitHub_M"
      },
      "references": [
        {
          "name": "https://github.com/gtsteffaniak/filebrowser/security/advisories/GHSA-mgqf-5mf5-prfj",
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://github.com/gtsteffaniak/filebrowser/security/advisories/GHSA-mgqf-5mf5-prfj"
        },
        {
          "name": "https://github.com/gtsteffaniak/filebrowser/pull/2795",
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/gtsteffaniak/filebrowser/pull/2795"
        },
        {
          "name": "https://github.com/gtsteffaniak/filebrowser/pull/2800",
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/gtsteffaniak/filebrowser/pull/2800"
        },
        {
          "name": "https://github.com/gtsteffaniak/filebrowser/commit/3c8c02414eefd3351ffe437fa39ff6eb150ffa67",
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/gtsteffaniak/filebrowser/commit/3c8c02414eefd3351ffe437fa39ff6eb150ffa67"
        },
        {
          "name": "https://github.com/gtsteffaniak/filebrowser/commit/4126edeb07a015c3809a89249b283e07a4e50c38",
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/gtsteffaniak/filebrowser/commit/4126edeb07a015c3809a89249b283e07a4e50c38"
        },
        {
          "name": "https://github.com/gtsteffaniak/filebrowser/releases/tag/v1.5.2-stable",
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/gtsteffaniak/filebrowser/releases/tag/v1.5.2-stable"
        },
        {
          "name": "https://github.com/gtsteffaniak/filebrowser/releases/tag/v2.0.1-beta",
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/gtsteffaniak/filebrowser/releases/tag/v2.0.1-beta"
        }
      ],
      "source": {
        "advisory": "GHSA-mgqf-5mf5-prfj",
        "discovery": "UNKNOWN"
      },
      "title": "FileBrowser Quantum: Symlink following escapes user scope allowing arbitrary file read outside the served directory"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
    "assignerShortName": "GitHub_M",
    "cveId": "CVE-2026-116682",
    "datePublished": "2026-10-27T17:48:04.364Z",
    "dateReserved": "2026-10-26T20:00:59.829Z",
    "dateUpdated": "2026-10-27T17:48:04.364Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-117526 (GCVE-0-2026-117526)

Vulnerability from cvelistv5 – Published: 2026-10-27 17:45 – Updated: 2026-10-27 17:45

Title

reduxjs redux-devtools Remotedev Server evalAction code injection

Summary

A vulnerability was found in reduxjs redux-devtools 5.0.0. Affected by this vulnerability is the function evalAction of the component Remotedev Server. The manipulation of the argument action results in code injection. The attack is only possible with local access. The exploit has been made public and could be used. The project was informed of the problem early through an issue report but has not responded yet.

Severity

4.8 (Medium)


                        
                          CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P

5.3 (Medium)


                        
                          CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L/E:P/RL:X/RC:C

5.3 (Medium)


                        
                          CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L/E:P/RL:X/RC:C

CWE

CWE-94 - Code Injection
CWE-74 - Injection

Assigner

VulDB CNA under the mitre root

CNA scorecard B 83/100 over 3883 records in the last 180 days details

References

6 references

URL	Tags
https://vuldb.com/vuln/427087	vdb-entrytechnical-description
https://vuldb.com/vuln/427087/cti	signaturepermissions-required
https://vuldb.com/cve/CVE-2026-117526	third-party-advisory
https://vuldb.com/submit/1025061	third-party-advisory
https://github.com/reduxjs/redux-devtools/issues/2125	exploitissue-tracking
https://github.com/reduxjs/redux-devtools/	product

Impacted products

1 product

Vendor	Product	Version
reduxjs	redux-devtools	Affected: 5.0.0 cpe:2.3:a:reduxjs:redux-devtools::::::::

Credits

wilson888 (VulDB User) VulDB CNA Team

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "cna": {
      "affected": [
        {
          "cpes": [
            "cpe:2.3:a:reduxjs:redux-devtools:*:*:*:*:*:*:*:*"
          ],
          "modules": [
            "Remotedev Server"
          ],
          "product": "redux-devtools",
          "vendor": "reduxjs",
          "versions": [
            {
              "status": "affected",
              "version": "5.0.0"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "type": "reporter",
          "value": "wilson888 (VulDB User)"
        },
        {
          "lang": "en",
          "type": "coordinator",
          "value": "VulDB CNA Team"
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "A vulnerability was found in reduxjs redux-devtools 5.0.0. Affected by this vulnerability is the function evalAction of the component Remotedev Server. The manipulation of the argument action results in code injection. The attack is only possible with local access. The exploit has been made public and could be used. The project was informed of the problem early through an issue report but has not responded yet."
        }
      ],
      "metrics": [
        {
          "cvssV4_0": {
            "baseScore": 4.8,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P",
            "version": "4.0"
          }
        },
        {
          "cvssV3_1": {
            "baseScore": 5.3,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L/E:P/RL:X/RC:C",
            "version": "3.1"
          }
        },
        {
          "cvssV3_0": {
            "baseScore": 5.3,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L/E:P/RL:X/RC:C",
            "version": "3.0"
          }
        },
        {
          "cvssV2_0": {
            "baseScore": 4.3,
            "vectorString": "AV:L/AC:L/Au:S/C:P/I:P/A:P/E:POC/RL:ND/RC:C",
            "version": "2.0"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-94",
              "description": "Code Injection",
              "lang": "en",
              "type": "CWE"
            }
          ]
        },
        {
          "descriptions": [
            {
              "cweId": "CWE-74",
              "description": "Injection",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-10-27T17:45:15.061Z",
        "orgId": "1af790b2-7ee1-4545-860a-a788eba489b5",
        "shortName": "VulDB"
      },
      "references": [
        {
          "name": "VDB-427087 | reduxjs redux-devtools Remotedev Server evalAction code injection",
          "tags": [
            "vdb-entry",
            "technical-description"
          ],
          "url": "https://vuldb.com/vuln/427087"
        },
        {
          "name": "VDB-427087 | CTI Indicators (IOB, IOC, TTP, IOA)",
          "tags": [
            "signature",
            "permissions-required"
          ],
          "url": "https://vuldb.com/vuln/427087/cti"
        },
        {
          "name": "CVE-2026-117526 | CVE Analysis and Report",
          "tags": [
            "third-party-advisory"
          ],
          "url": "https://vuldb.com/cve/CVE-2026-117526"
        },
        {
          "name": "Submit #1025061 | https://github.com/reduxjs/redux-devtools redux-devtools 5.0.0 Local sensitive logic exposure lead to Remote Code Exectuion",
          "tags": [
            "third-party-advisory"
          ],
          "url": "https://vuldb.com/submit/1025061"
        },
        {
          "tags": [
            "exploit",
            "issue-tracking"
          ],
          "url": "https://github.com/reduxjs/redux-devtools/issues/2125"
        },
        {
          "tags": [
            "product"
          ],
          "url": "https://github.com/reduxjs/redux-devtools/"
        }
      ],
      "timeline": [
        {
          "lang": "en",
          "time": "2026-10-27T00:00:00.000Z",
          "value": "Advisory disclosed"
        },
        {
          "lang": "en",
          "time": "2026-10-27T01:00:00.000Z",
          "value": "VulDB entry created"
        },
        {
          "lang": "en",
          "time": "2026-10-27T10:48:15.000Z",
          "value": "VulDB entry last update"
        }
      ],
      "title": "reduxjs redux-devtools Remotedev Server evalAction code injection",
      "x_generator": [
        "VulDB PVTS v202610"
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "1af790b2-7ee1-4545-860a-a788eba489b5",
    "assignerShortName": "VulDB",
    "cveId": "CVE-2026-117526",
    "datePublished": "2026-10-27T17:45:15.061Z",
    "dateReserved": "2026-10-27T09:43:09.716Z",
    "dateUpdated": "2026-10-27T17:45:15.061Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-116680 (GCVE-0-2026-116680)

Vulnerability from cvelistv5 – Published: 2026-10-27 17:43 – Updated: 2026-10-27 17:43

Title

Homebox generic notifier SSRF via HTTP redirect after URL validation

Summary

HomeBox is a home inventory and organization system. Prior to version 0.27.0, Homebox validates generic notifier URLs with ValidateNotifierURL before creation, update, testing, and scheduled delivery, but shoutrrr sends the request through http.DefaultClient.Do without a CheckRedirect policy that revalidates each Location target. An authenticated collection member can configure a permitted notifier host that redirects to loopback, link-local, cloud metadata, or another blocked destination, causing the follow-up request to bypass the product's SSRF policy. The flaw is reachable through POST /api/v1/notifiers/test for immediate requests and through stored notifiers during scheduled maintenance delivery. This issue is fixed in version 0.27.0.

Severity

6.4 (Medium)


                        
                          CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N

CWE

CWE-918 - Server-Side Request Forgery (SSRF)

Assigner

GitHub_M CNA under the mitre root

CNA scorecard C 72/100 over 7806 records in the last 180 days details

References

3 references

URL	Tags
https://github.com/sysadminsmedia/homebox/securit…	x_refsource_CONFIRM
https://github.com/sysadminsmedia/homebox/commit/…	x_refsource_MISC
https://github.com/sysadminsmedia/homebox/release…	x_refsource_MISC

Impacted products

1 product

Vendor	Product	Version
sysadminsmedia	homebox	Affected: < 0.27.0

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "cna": {
      "affected": [
        {
          "product": "homebox",
          "vendor": "sysadminsmedia",
          "versions": [
            {
              "status": "affected",
              "version": "\u003c 0.27.0"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "HomeBox is a home inventory and organization system. Prior to version 0.27.0, Homebox validates generic notifier URLs with ValidateNotifierURL before creation, update, testing, and scheduled delivery, but shoutrrr sends the request through http.DefaultClient.Do without a CheckRedirect policy that revalidates each Location target. An authenticated collection member can configure a permitted notifier host that redirects to loopback, link-local, cloud metadata, or another blocked destination, causing the follow-up request to bypass the product\u0027s SSRF policy. The flaw is reachable through POST /api/v1/notifiers/test for immediate requests and through stored notifiers during scheduled maintenance delivery. This issue is fixed in version 0.27.0."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 6.4,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "LOW",
            "integrityImpact": "LOW",
            "privilegesRequired": "LOW",
            "scope": "CHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N",
            "version": "3.1"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-918",
              "description": "CWE-918: Server-Side Request Forgery (SSRF)",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-10-27T17:43:52.502Z",
        "orgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
        "shortName": "GitHub_M"
      },
      "references": [
        {
          "name": "https://github.com/sysadminsmedia/homebox/security/advisories/GHSA-4gp5-59x3-vhhg",
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://github.com/sysadminsmedia/homebox/security/advisories/GHSA-4gp5-59x3-vhhg"
        },
        {
          "name": "https://github.com/sysadminsmedia/homebox/commit/52eb6f3511bf239bcf34a87a4d13cedd2f704122",
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/sysadminsmedia/homebox/commit/52eb6f3511bf239bcf34a87a4d13cedd2f704122"
        },
        {
          "name": "https://github.com/sysadminsmedia/homebox/releases/tag/v0.27.0",
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/sysadminsmedia/homebox/releases/tag/v0.27.0"
        }
      ],
      "source": {
        "advisory": "GHSA-4gp5-59x3-vhhg",
        "discovery": "UNKNOWN"
      },
      "title": "Homebox generic notifier SSRF via HTTP redirect after URL validation"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
    "assignerShortName": "GitHub_M",
    "cveId": "CVE-2026-116680",
    "datePublished": "2026-10-27T17:43:52.502Z",
    "dateReserved": "2026-10-26T20:00:59.829Z",
    "dateUpdated": "2026-10-27T17:43:52.502Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-88812 (GCVE-0-2026-88812)

Vulnerability from cvelistv5 – Published: 2026-10-27 17:43 – Updated: 2026-10-27 17:43

Title

X.Org Server XKB SetGeometry TextDoodad Double Free

Summary

A double free in XKB SetGeometryin X.Org X Server before 21.1.25 and X Wayland before 24.1.14 could be used by attached clients to cause a crash or potentially code in the x server context.

Severity

7.8 (High)


                        
                          CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

CWE

CWE-415 - Double free

Assigner

suse CNA under the mitre root

CNA scorecard B 79/100 over 104 records in the last 180 days details

References

1 reference

URL	Tags
https://gitlab.freedesktop.org/xorg/xserver/-/com…	patch

Impacted products

2 products

Vendor	Product	Version
X.org	xorg-x11-server	Affected: 0 , < 21.1.25 (rpm) cpe:2.3:a:x.org:xorg-x11-server::::::::
x.org	xwayland	Affected: 0 , < 24.1.14 (rpm) cpe:2.3:a:x.org:xwayland::::::::

Date Public

2026-10-27 16:47

Credits

Anonymous with TrendAI Zero Day Initiative

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "packageName": "xorg-x11-server",
          "product": "xorg-x11-server",
          "repo": "https://gitlab.freedesktop.org/xorg/xserver",
          "vendor": "X.org",
          "versions": [
            {
              "lessThan": "21.1.25",
              "status": "affected",
              "version": "0",
              "versionType": "rpm"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "packageName": "xwayland",
          "product": "xwayland",
          "repo": "https://gitlab.freedesktop.org/xorg/xserver",
          "vendor": "x.org",
          "versions": [
            {
              "lessThan": "24.1.14",
              "status": "affected",
              "version": "0",
              "versionType": "rpm"
            }
          ]
        }
      ],
      "cpeApplicability": [
        {
          "nodes": [
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:a:x.org:xorg-x11-server:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "21.1.25",
                  "versionStartIncluding": "0",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            },
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:a:x.org:xwayland:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "24.1.14",
                  "versionStartIncluding": "0",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            }
          ],
          "operator": "OR"
        }
      ],
      "credits": [
        {
          "lang": "en",
          "type": "finder",
          "value": "Anonymous with TrendAI Zero Day Initiative"
        }
      ],
      "datePublic": "2026-10-27T16:47:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "A double free in\u0026nbsp;XKB SetGeometryin X.Org X Server before 21.1.25 and X Wayland before 24.1.14 could be used by attached clients to cause a crash or potentially code in the x server context."
            }
          ],
          "value": "A double free in\u00a0XKB SetGeometryin X.Org X Server before 21.1.25 and X Wayland before 24.1.14 could be used by attached clients to cause a crash or potentially code in the x server context."
        }
      ],
      "impacts": [
        {
          "capecId": "CAPEC-175",
          "descriptions": [
            {
              "lang": "en",
              "value": "CAPEC-175 Code Inclusion"
            }
          ]
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "LOCAL",
            "availabilityImpact": "HIGH",
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-415",
              "description": "CWE-415 Double free",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-10-27T17:43:18.583Z",
        "orgId": "404e59f5-483d-4b8a-8e7a-e67604dd8afb",
        "shortName": "suse"
      },
      "references": [
        {
          "tags": [
            "patch"
          ],
          "url": "https://gitlab.freedesktop.org/xorg/xserver/-/commit/0d1b1b0bad86c9ea2a3b7ca5a70e681dc69f1ecc"
        }
      ],
      "source": {
        "discovery": "EXTERNAL"
      },
      "title": "X.Org Server XKB SetGeometry TextDoodad Double Free",
      "x_generator": {
        "engine": "Vulnogram 1.0.5"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "404e59f5-483d-4b8a-8e7a-e67604dd8afb",
    "assignerShortName": "suse",
    "cveId": "CVE-2026-88812",
    "datePublished": "2026-10-27T17:43:18.583Z",
    "dateReserved": "2026-09-10T08:35:07.010Z",
    "dateUpdated": "2026-10-27T17:43:18.583Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-102816 (GCVE-0-2026-102816)

Vulnerability from cvelistv5 – Published: 2026-10-27 17:41 – Updated: 2026-10-27 17:41

Title

Unauthenticated Wireless Regulatory Region Configuration in TP-Link RE305

Summary

An authorization vulnerability exists in the country or region configuration interface of TP-Link RE305 V3. An unauthenticated attacker on the same local network may modify the wireless regulatory region and force the device to reapply its wireless configuration. Successful exploitation may cause wireless connection interruptions, unavailable channels, client disconnections, or wireless service instability, and may cause the device to apply parameters intended for a different regulatory region.

Severity

5.3 (Medium)


                        
                          CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N

CWE

CWE-306 - Missing authentication for critical function

Assigner

TPLink CNA under the mitre root

CNA scorecard B 87/100 over 101 records in the last 180 days details

References

3 references

URL	Tags
https://www.tp-link.com/us/support/download/re305…	patch
https://www.tp-link.com/en/support/download/re305…	patch
https://www.tp-link.com/us/support/faq/5362/	vendor-advisory

Impacted products

1 product

Vendor	Product	Version
TP-Link Systems Inc.	RE305 v3	Affected: 0 , < 1.1.8 Build 20260921 Rel. 42853 (custom)

Credits

Victor Mota

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "RE305 v3",
          "vendor": "TP-Link Systems Inc.",
          "versions": [
            {
              "lessThan": "1.1.8 Build 20260921 Rel. 42853",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "type": "finder",
          "value": "Victor Mota"
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "\u003cdiv\u003e\u003cp\u003eAn authorization vulnerability exists in the country or region configuration interface of TP-Link RE305 V3. An unauthenticated attacker on the same local network may modify the wireless regulatory region and force the device to reapply its wireless configuration.\u0026nbsp;\u003c/p\u003e\u003c/div\u003e\u003cdiv\u003e\u003cp\u003eSuccessful exploitation may cause wireless connection interruptions, unavailable channels, client disconnections, or wireless service instability, and may cause the device to apply parameters intended for a different regulatory region.\u0026nbsp;\u003c/p\u003e\u003c/div\u003e"
            }
          ],
          "value": "An authorization vulnerability exists in the country or region configuration interface of TP-Link RE305 V3. An unauthenticated attacker on the same local network may modify the wireless regulatory region and force the device to reapply its wireless configuration.\u00a0\n\n\n\n\n\nSuccessful exploitation may cause wireless connection interruptions, unavailable channels, client disconnections, or wireless service instability, and may cause the device to apply parameters intended for a different regulatory region."
        }
      ],
      "impacts": [
        {
          "capecId": "CAPEC-1",
          "descriptions": [
            {
              "lang": "en",
              "value": "CAPEC-1 Accessing Functionality Not Properly Constrained by ACLs"
            }
          ]
        }
      ],
      "metrics": [
        {
          "cvssV4_0": {
            "Automatable": "NOT_DEFINED",
            "Recovery": "NOT_DEFINED",
            "Safety": "NOT_DEFINED",
            "attackComplexity": "LOW",
            "attackRequirements": "NONE",
            "attackVector": "ADJACENT",
            "baseScore": 5.3,
            "baseSeverity": "MEDIUM",
            "exploitMaturity": "NOT_DEFINED",
            "privilegesRequired": "NONE",
            "providerUrgency": "NOT_DEFINED",
            "subAvailabilityImpact": "NONE",
            "subConfidentialityImpact": "NONE",
            "subIntegrityImpact": "NONE",
            "userInteraction": "NONE",
            "valueDensity": "NOT_DEFINED",
            "vectorString": "CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N",
            "version": "4.0",
            "vulnAvailabilityImpact": "LOW",
            "vulnConfidentialityImpact": "NONE",
            "vulnIntegrityImpact": "NONE",
            "vulnerabilityResponseEffort": "NOT_DEFINED"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-306",
              "description": "CWE-306 Missing authentication for critical function",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-10-27T17:41:21.636Z",
        "orgId": "f23511db-6c3e-4e32-a477-6aa17d310630",
        "shortName": "TPLink"
      },
      "references": [
        {
          "tags": [
            "patch"
          ],
          "url": "https://www.tp-link.com/us/support/download/re305/v3/#Firmware"
        },
        {
          "tags": [
            "patch"
          ],
          "url": "https://www.tp-link.com/en/support/download/re305/v3/#Firmware"
        },
        {
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://www.tp-link.com/us/support/faq/5362/"
        }
      ],
      "source": {
        "discovery": "UNKNOWN"
      },
      "title": "Unauthenticated Wireless Regulatory Region Configuration in TP-Link RE305",
      "x_generator": {
        "engine": "Vulnogram 1.0.5"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "f23511db-6c3e-4e32-a477-6aa17d310630",
    "assignerShortName": "TPLink",
    "cveId": "CVE-2026-102816",
    "datePublished": "2026-10-27T17:41:21.636Z",
    "dateReserved": "2026-09-29T17:18:44.961Z",
    "dateUpdated": "2026-10-27T17:41:21.636Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-102815 (GCVE-0-2026-102815)

Vulnerability from cvelistv5 – Published: 2026-10-27 17:40 – Updated: 2026-10-27 17:40

Title

Command Injection in tmpServer Allows Local Privilege Escalation in TP-Link RE305

Summary

An operating-system command injection vulnerability exists in the tmpServer service of TP-Link RE305 V3. The service runs with root privileges and listens on the local loopback interface. A local attacker with access to a low-privileged process on the device may submit a crafted request to the TDDPv1 service and execute operating-system commands with root privileges. Successful exploitation may allow a local attacker with low privileges to obtain root privileges and execute arbitrary operating-system commands on the affected device.

Severity

6.9 (Medium)


                        
                          CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:H/VA:L/SC:N/SI:N/SA:N

CWE

CWE-78 - Improper neutralization of special elements used in an OS command ('OS command injection')

Assigner

TPLink CNA under the mitre root

CNA scorecard B 87/100 over 101 records in the last 180 days details

References

3 references

URL	Tags
https://www.tp-link.com/us/support/download/re305…	patch
https://www.tp-link.com/en/support/download/re305…	patch
https://www.tp-link.com/us/support/faq/5362/	vendor-advisory

Impacted products

1 product

Vendor	Product	Version
TP-Link Systems Inc.	RE305 v3	Affected: 0 , < 1.1.8 Build 20260921 Rel. 42853 (custom)

Credits

Victor Mota

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "RE305 v3",
          "vendor": "TP-Link Systems Inc.",
          "versions": [
            {
              "lessThan": "1.1.8 Build 20260921 Rel. 42853",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "type": "finder",
          "value": "Victor Mota"
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "\u003cp\u003eAn\noperating-system command injection vulnerability exists in the tmpServer\nservice of TP-Link RE305 V3. The service runs with root privileges and listens\non the local loopback interface. A local attacker with access to a\nlow-privileged process on the device may submit a crafted request to the TDDPv1\nservice and execute operating-system commands with root privileges.\u003c/p\u003e\u003cp\u003e\n\n\u003c/p\u003e\u003cp\u003eSuccessful\nexploitation may allow a local attacker with low privileges to obtain root\nprivileges and execute arbitrary operating-system commands on the affected\ndevice.\u003c/p\u003e"
            }
          ],
          "value": "An\noperating-system command injection vulnerability exists in the tmpServer\nservice of TP-Link RE305 V3. The service runs with root privileges and listens\non the local loopback interface. A local attacker with access to a\nlow-privileged process on the device may submit a crafted request to the TDDPv1\nservice and execute operating-system commands with root privileges.\n\n\n\n\n\n\n\n\n\nSuccessful\nexploitation may allow a local attacker with low privileges to obtain root\nprivileges and execute arbitrary operating-system commands on the affected\ndevice."
        }
      ],
      "impacts": [
        {
          "capecId": "CAPEC-233",
          "descriptions": [
            {
              "lang": "en",
              "value": "CAPEC-233 Privilege Escalation"
            }
          ]
        }
      ],
      "metrics": [
        {
          "cvssV4_0": {
            "Automatable": "NOT_DEFINED",
            "Recovery": "NOT_DEFINED",
            "Safety": "NOT_DEFINED",
            "attackComplexity": "LOW",
            "attackRequirements": "NONE",
            "attackVector": "LOCAL",
            "baseScore": 6.9,
            "baseSeverity": "MEDIUM",
            "exploitMaturity": "NOT_DEFINED",
            "privilegesRequired": "LOW",
            "providerUrgency": "NOT_DEFINED",
            "subAvailabilityImpact": "NONE",
            "subConfidentialityImpact": "NONE",
            "subIntegrityImpact": "NONE",
            "userInteraction": "NONE",
            "valueDensity": "NOT_DEFINED",
            "vectorString": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:H/VA:L/SC:N/SI:N/SA:N",
            "version": "4.0",
            "vulnAvailabilityImpact": "LOW",
            "vulnConfidentialityImpact": "LOW",
            "vulnIntegrityImpact": "HIGH",
            "vulnerabilityResponseEffort": "NOT_DEFINED"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-78",
              "description": "CWE-78 Improper neutralization of special elements used in an OS command (\u0027OS command injection\u0027)",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-10-27T17:40:59.514Z",
        "orgId": "f23511db-6c3e-4e32-a477-6aa17d310630",
        "shortName": "TPLink"
      },
      "references": [
        {
          "tags": [
            "patch"
          ],
          "url": "https://www.tp-link.com/us/support/download/re305/v3/#Firmware"
        },
        {
          "tags": [
            "patch"
          ],
          "url": "https://www.tp-link.com/en/support/download/re305/v3/#Firmware"
        },
        {
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://www.tp-link.com/us/support/faq/5362/"
        }
      ],
      "source": {
        "discovery": "UNKNOWN"
      },
      "title": "Command Injection in tmpServer Allows Local Privilege Escalation in TP-Link RE305",
      "x_generator": {
        "engine": "Vulnogram 1.0.5"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "f23511db-6c3e-4e32-a477-6aa17d310630",
    "assignerShortName": "TPLink",
    "cveId": "CVE-2026-102815",
    "datePublished": "2026-10-27T17:40:59.514Z",
    "dateReserved": "2026-09-29T17:18:44.961Z",
    "dateUpdated": "2026-10-27T17:40:59.514Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-102814 (GCVE-0-2026-102814)

Vulnerability from cvelistv5 – Published: 2026-10-27 17:40 – Updated: 2026-10-27 17:40

Title

Improper Authentication in TP-Link TDDP v2 Allows Root Command Execution in TP-Link RE305

Summary

An authentication weakness exists in the TP-Link TDDP v2 service of TP-Link RE305 V3. TDDP v2 uses a fixed and derivable cryptographic key, which may allow an unauthenticated attacker on the same local network to forge protocol packets and access privileged TDDP operations, including functionality that can lead to operating-system command execution when the TDDP service is running and accessible. Successful exploitation may allow an unauthenticated attacker on the same local area network to execute arbitrary system commands with root privileges.

Severity

8.7 (High)


                        
                          CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

CWE

CWE-78 - Improper neutralization of special elements used in an OS command ('OS command injection')

Assigner

TPLink CNA under the mitre root

CNA scorecard B 87/100 over 101 records in the last 180 days details

References

3 references

URL	Tags
https://www.tp-link.com/us/support/download/re305…	patch
https://www.tp-link.com/en/support/download/re305…	patch
https://www.tp-link.com/us/support/faq/5362/	vendor-advisory

Impacted products

1 product

Vendor	Product	Version
TP-Link Systems Inc.	RE305 v3	Affected: 0 , < 1.1.8 Build 20260921 Rel. 42853 (custom)

Credits

Victor Mota

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "RE305 v3",
          "vendor": "TP-Link Systems Inc.",
          "versions": [
            {
              "lessThan": "1.1.8 Build 20260921 Rel. 42853",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "type": "finder",
          "value": "Victor Mota"
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "\u003cp\u003eAn\nauthentication weakness exists in the TP-Link TDDP v2 service of TP-Link RE305\nV3. TDDP v2 uses a fixed and derivable cryptographic key, which may allow an\nunauthenticated attacker on the same local network to forge protocol packets\nand access privileged TDDP operations, including functionality that can lead to\noperating-system command execution when the TDDP service is running and\naccessible.\u003c/p\u003e\u003cp\u003e\n\n\u003c/p\u003e\u003cp\u003eSuccessful\nexploitation may allow an unauthenticated attacker on the same local area\nnetwork to execute arbitrary system commands with root privileges.\u003c/p\u003e"
            }
          ],
          "value": "An\nauthentication weakness exists in the TP-Link TDDP v2 service of TP-Link RE305\nV3. TDDP v2 uses a fixed and derivable cryptographic key, which may allow an\nunauthenticated attacker on the same local network to forge protocol packets\nand access privileged TDDP operations, including functionality that can lead to\noperating-system command execution when the TDDP service is running and\naccessible.\n\n\n\n\n\n\n\n\n\nSuccessful\nexploitation may allow an unauthenticated attacker on the same local area\nnetwork to execute arbitrary system commands with root privileges."
        }
      ],
      "impacts": [
        {
          "capecId": "CAPEC-88",
          "descriptions": [
            {
              "lang": "en",
              "value": "CAPEC-88 OS Command Injection"
            }
          ]
        }
      ],
      "metrics": [
        {
          "cvssV4_0": {
            "Automatable": "NOT_DEFINED",
            "Recovery": "NOT_DEFINED",
            "Safety": "NOT_DEFINED",
            "attackComplexity": "LOW",
            "attackRequirements": "NONE",
            "attackVector": "ADJACENT",
            "baseScore": 8.7,
            "baseSeverity": "HIGH",
            "exploitMaturity": "NOT_DEFINED",
            "privilegesRequired": "NONE",
            "providerUrgency": "NOT_DEFINED",
            "subAvailabilityImpact": "NONE",
            "subConfidentialityImpact": "NONE",
            "subIntegrityImpact": "NONE",
            "userInteraction": "NONE",
            "valueDensity": "NOT_DEFINED",
            "vectorString": "CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N",
            "version": "4.0",
            "vulnAvailabilityImpact": "HIGH",
            "vulnConfidentialityImpact": "HIGH",
            "vulnIntegrityImpact": "HIGH",
            "vulnerabilityResponseEffort": "NOT_DEFINED"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-78",
              "description": "CWE-78 Improper neutralization of special elements used in an OS command (\u0027OS command injection\u0027)",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-10-27T17:40:43.627Z",
        "orgId": "f23511db-6c3e-4e32-a477-6aa17d310630",
        "shortName": "TPLink"
      },
      "references": [
        {
          "tags": [
            "patch"
          ],
          "url": "https://www.tp-link.com/us/support/download/re305/v3/#Firmware"
        },
        {
          "tags": [
            "patch"
          ],
          "url": "https://www.tp-link.com/en/support/download/re305/v3/#Firmware"
        },
        {
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://www.tp-link.com/us/support/faq/5362/"
        }
      ],
      "source": {
        "discovery": "UNKNOWN"
      },
      "title": "Improper Authentication in TP-Link TDDP v2 Allows Root Command Execution in TP-Link RE305",
      "x_generator": {
        "engine": "Vulnogram 1.0.5"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "f23511db-6c3e-4e32-a477-6aa17d310630",
    "assignerShortName": "TPLink",
    "cveId": "CVE-2026-102814",
    "datePublished": "2026-10-27T17:40:43.627Z",
    "dateReserved": "2026-09-29T17:18:44.961Z",
    "dateUpdated": "2026-10-27T17:40:43.627Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-102813 (GCVE-0-2026-102813)

Vulnerability from cvelistv5 – Published: 2026-10-27 17:40 – Updated: 2026-10-27 17:40

Title

Administrator Password Reset Through the Verification-Code Interface in TP-Link RE305

Summary

An authentication flaw exists in the password-recovery functionality of TP-Link RE305 V3. The verification-code interface allows an unauthenticated attacker on the same local network to trigger generation of an administrator password-reset verification code. Because the interface lacks an effective attempt counter or lockout mechanism and uses a predictable verification-code generation process, an attacker may obtain or brute-force the code and reset the administrator password. Successful exploitation may allow an unauthenticated attacker on the local network to reset the administrator password and subsequently access privileged device-management functions.

Severity

6.1 (Medium)


                        
                          CVSS:4.0/AV:A/AC:H/AT:N/PR:N/UI:N/VC:L/VI:H/VA:L/SC:N/SI:N/SA:N

CWE

CWE-338 - Use of cryptographically weak Pseudo-Random number generator (PRNG)

Assigner

TPLink CNA under the mitre root

CNA scorecard B 87/100 over 101 records in the last 180 days details

References

3 references

URL	Tags
https://www.tp-link.com/us/support/download/re305…	patch
https://www.tp-link.com/en/support/download/re305…	patch
https://www.tp-link.com/us/support/faq/5362/	vendor-advisory

Impacted products

1 product

Vendor	Product	Version
TP-Link Systems Inc.	RE305 v3	Affected: 0 , < 1.1.8 Build 20260921 Rel. 42853 (custom)

Credits

Victor Mota

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "RE305 v3",
          "vendor": "TP-Link Systems Inc.",
          "versions": [
            {
              "lessThan": "1.1.8 Build 20260921 Rel. 42853",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "type": "finder",
          "value": "Victor Mota"
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "\u003cdiv\u003e\u003cp\u003eAn authentication flaw exists in the password-recovery functionality of TP-Link RE305 V3. The verification-code interface allows an unauthenticated attacker on the same local network to trigger generation of an administrator password-reset verification code. Because the interface lacks an effective attempt counter or lockout mechanism and uses a predictable verification-code generation process, an attacker may obtain or brute-force the code and reset the administrator password.\u0026nbsp;\u003c/p\u003e\u003c/div\u003e\u003cdiv\u003e\u003cp\u003eSuccessful exploitation may allow an unauthenticated attacker on the local network to reset the administrator password and subsequently access privileged device-management functions.\u003c/p\u003e\u003c/div\u003e"
            }
          ],
          "value": "An authentication flaw exists in the password-recovery functionality of TP-Link RE305 V3. The verification-code interface allows an unauthenticated attacker on the same local network to trigger generation of an administrator password-reset verification code. Because the interface lacks an effective attempt counter or lockout mechanism and uses a predictable verification-code generation process, an attacker may obtain or brute-force the code and reset the administrator password.\u00a0\n\n\n\n\n\nSuccessful exploitation may allow an unauthenticated attacker on the local network to reset the administrator password and subsequently access privileged device-management functions."
        }
      ],
      "impacts": [
        {
          "capecId": "CAPEC-50",
          "descriptions": [
            {
              "lang": "en",
              "value": "CAPEC-50 Password Recovery Exploitation"
            }
          ]
        }
      ],
      "metrics": [
        {
          "cvssV4_0": {
            "Automatable": "NOT_DEFINED",
            "Recovery": "NOT_DEFINED",
            "Safety": "NOT_DEFINED",
            "attackComplexity": "HIGH",
            "attackRequirements": "NONE",
            "attackVector": "ADJACENT",
            "baseScore": 6.1,
            "baseSeverity": "MEDIUM",
            "exploitMaturity": "NOT_DEFINED",
            "privilegesRequired": "NONE",
            "providerUrgency": "NOT_DEFINED",
            "subAvailabilityImpact": "NONE",
            "subConfidentialityImpact": "NONE",
            "subIntegrityImpact": "NONE",
            "userInteraction": "NONE",
            "valueDensity": "NOT_DEFINED",
            "vectorString": "CVSS:4.0/AV:A/AC:H/AT:N/PR:N/UI:N/VC:L/VI:H/VA:L/SC:N/SI:N/SA:N",
            "version": "4.0",
            "vulnAvailabilityImpact": "LOW",
            "vulnConfidentialityImpact": "LOW",
            "vulnIntegrityImpact": "HIGH",
            "vulnerabilityResponseEffort": "NOT_DEFINED"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-338",
              "description": "CWE-338 Use of cryptographically weak Pseudo-Random number generator (PRNG)",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-10-27T17:40:31.857Z",
        "orgId": "f23511db-6c3e-4e32-a477-6aa17d310630",
        "shortName": "TPLink"
      },
      "references": [
        {
          "tags": [
            "patch"
          ],
          "url": "https://www.tp-link.com/us/support/download/re305/v3/#Firmware"
        },
        {
          "tags": [
            "patch"
          ],
          "url": "https://www.tp-link.com/en/support/download/re305/v3/#Firmware"
        },
        {
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://www.tp-link.com/us/support/faq/5362/"
        }
      ],
      "source": {
        "discovery": "UNKNOWN"
      },
      "title": "Administrator Password Reset Through the Verification-Code Interface in TP-Link RE305",
      "x_generator": {
        "engine": "Vulnogram 1.0.5"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "f23511db-6c3e-4e32-a477-6aa17d310630",
    "assignerShortName": "TPLink",
    "cveId": "CVE-2026-102813",
    "datePublished": "2026-10-27T17:40:31.857Z",
    "dateReserved": "2026-09-29T17:18:44.961Z",
    "dateUpdated": "2026-10-27T17:40:31.857Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-102812 (GCVE-0-2026-102812)

Vulnerability from cvelistv5 – Published: 2026-10-27 17:40 – Updated: 2026-10-27 17:40

Title

Hardcoded AES-128 Key and Fixed IV in Configuration Backup Encryption in TP-Link RE305 and Archer C7

Summary

A hard-coded cryptographic key vulnerability exists in the user-configuration backup mechanism of TP-Link RE305 V3 and Archer C7 V5. A fixed AES-128 key and initialization vector are embedded in the firmware configuration-management component. An attacker who obtains an affected configuration backup file may extract the cryptographic material from the firmware and use it to decrypt the backup. Successful exploitation may disclose sensitive configuration information contained in a backup file, including administrator passwords and Wi-Fi credentials.

Severity

6.9 (Medium)


                        
                          CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N

CWE

CWE-321 - Use of hard-coded cryptographic key

Assigner

TPLink CNA under the mitre root

CNA scorecard B 87/100 over 101 records in the last 180 days details

References

5 references

URL	Tags
https://www.tp-link.com/us/support/download/re305…	patch
https://www.tp-link.com/en/support/download/re305…	patch
https://www.tp-link.com/en/support/download/arche…	patch
https://www.tp-link.com/us/support/download/arche…	patch
https://www.tp-link.com/us/support/faq/5362/	vendor-advisory

Impacted products

2 products

Vendor	Product	Version
TP-Link Systems Inc.	RE305 v3	Affected: 0 , < 1.1.8 Build 20260921 Rel. 42853 (custom)
TP-Link Systems Inc.	Archer C7 v5	Affected: 0 , < 1.3.1 Build 20260821 Rel. 41256 (custom)

Credits

Victor Mota

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "RE305 v3",
          "vendor": "TP-Link Systems Inc.",
          "versions": [
            {
              "lessThan": "1.1.8 Build 20260921 Rel. 42853",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "Archer C7 v5",
          "vendor": "TP-Link Systems Inc.",
          "versions": [
            {
              "lessThan": "1.3.1 Build 20260821 Rel. 41256",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "type": "finder",
          "value": "Victor Mota"
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "\u003cp\u003eA hard-coded\ncryptographic key vulnerability exists in the user-configuration backup\nmechanism of TP-Link RE305 V3 and Archer C7 V5. A fixed AES-128 key and\ninitialization vector are embedded in the firmware configuration-management\ncomponent. An attacker who obtains an affected configuration backup file may\nextract the cryptographic material from the firmware and use it to decrypt the\nbackup.\u0026nbsp;\u003c/p\u003e\u003cp\u003e\n\n\u003c/p\u003e\u003cp\u003eSuccessful\nexploitation may disclose sensitive configuration information contained in a\nbackup file, including administrator passwords and Wi-Fi credentials.\u0026nbsp;\u003c/p\u003e"
            }
          ],
          "value": "A hard-coded\ncryptographic key vulnerability exists in the user-configuration backup\nmechanism of TP-Link RE305 V3 and Archer C7 V5. A fixed AES-128 key and\ninitialization vector are embedded in the firmware configuration-management\ncomponent. An attacker who obtains an affected configuration backup file may\nextract the cryptographic material from the firmware and use it to decrypt the\nbackup.\u00a0\n\n\n\n\n\n\n\n\n\nSuccessful\nexploitation may disclose sensitive configuration information contained in a\nbackup file, including administrator passwords and Wi-Fi credentials."
        }
      ],
      "impacts": [
        {
          "capecId": "CAPEC-37",
          "descriptions": [
            {
              "lang": "en",
              "value": "CAPEC-37 Retrieve Embedded Sensitive Data"
            }
          ]
        }
      ],
      "metrics": [
        {
          "cvssV4_0": {
            "Automatable": "NOT_DEFINED",
            "Recovery": "NOT_DEFINED",
            "Safety": "NOT_DEFINED",
            "attackComplexity": "LOW",
            "attackRequirements": "NONE",
            "attackVector": "LOCAL",
            "baseScore": 6.9,
            "baseSeverity": "MEDIUM",
            "exploitMaturity": "NOT_DEFINED",
            "privilegesRequired": "NONE",
            "providerUrgency": "NOT_DEFINED",
            "subAvailabilityImpact": "NONE",
            "subConfidentialityImpact": "NONE",
            "subIntegrityImpact": "NONE",
            "userInteraction": "NONE",
            "valueDensity": "NOT_DEFINED",
            "vectorString": "CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N",
            "version": "4.0",
            "vulnAvailabilityImpact": "NONE",
            "vulnConfidentialityImpact": "HIGH",
            "vulnIntegrityImpact": "NONE",
            "vulnerabilityResponseEffort": "NOT_DEFINED"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-321",
              "description": "CWE-321 Use of hard-coded cryptographic key",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-10-27T17:40:13.729Z",
        "orgId": "f23511db-6c3e-4e32-a477-6aa17d310630",
        "shortName": "TPLink"
      },
      "references": [
        {
          "tags": [
            "patch"
          ],
          "url": "https://www.tp-link.com/us/support/download/re305/v3/#Firmware"
        },
        {
          "tags": [
            "patch"
          ],
          "url": "https://www.tp-link.com/en/support/download/re305/v3/#Firmware"
        },
        {
          "tags": [
            "patch"
          ],
          "url": "https://www.tp-link.com/en/support/download/archer-c7/v5/#Firmware"
        },
        {
          "tags": [
            "patch"
          ],
          "url": "https://www.tp-link.com/us/support/download/archer-c7/v5/#Firmware"
        },
        {
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://www.tp-link.com/us/support/faq/5362/"
        }
      ],
      "source": {
        "discovery": "UNKNOWN"
      },
      "title": "Hardcoded AES-128 Key and Fixed IV in Configuration Backup Encryption in TP-Link RE305 and Archer C7",
      "x_generator": {
        "engine": "Vulnogram 1.0.5"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "f23511db-6c3e-4e32-a477-6aa17d310630",
    "assignerShortName": "TPLink",
    "cveId": "CVE-2026-102812",
    "datePublished": "2026-10-27T17:40:13.729Z",
    "dateReserved": "2026-09-29T17:18:44.960Z",
    "dateUpdated": "2026-10-27T17:40:13.729Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-118132 (GCVE-0-2026-118132)

Vulnerability from cvelistv5 – Published: 2026-10-27 17:38 – Updated: 2026-10-27 17:38

Title

CVE-2026-118132

Summary

NextChat version 2.16.1 contains a client‑side cross‑site scripting (XSS) vulnerability in the Plugin Editor due to unsafe rendering of externally supplied OpenAPI plugin schema content. When a plugin schema is loaded from a remote URL, the returned content is stored in plugin.content and later rendered using React’s dangerouslySetInnerHTML without proper sanitization. An attacker can host a malicious OpenAPI schema containing HTML or JavaScript markup and trick a user into loading it through the Plugin Editor, resulting in arbitrary JavaScript execution in the NextChat origin. Successful exploitation allows access to JavaScript‑readable cookies and other client‑side data associated with the NextChat application.

Severity

No CVSS data available.

CWE

CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

Assigner

certcc CNA under the mitre root

CNA scorecard E 42/100 over 160 records in the last 180 days details

References

1 reference

URL	Tags
https://github.com/ChatGPTNextWeb/NextChat

Impacted products

1 product

Vendor	Product	Version
NextChat	NextChat	Affected: 2.16.1

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "cna": {
      "affected": [
        {
          "product": "NextChat",
          "vendor": "NextChat",
          "versions": [
            {
              "status": "affected",
              "version": "2.16.1"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "NextChat version 2.16.1 contains a client\u2011side cross\u2011site scripting (XSS) vulnerability in the Plugin Editor due to unsafe rendering of externally supplied OpenAPI plugin schema content. When a plugin schema is loaded from a remote URL, the returned content is stored in plugin.content and later rendered using React\u2019s dangerouslySetInnerHTML without proper sanitization. An attacker can host a malicious OpenAPI schema containing HTML or JavaScript markup and trick a user into loading it through the Plugin Editor, resulting in arbitrary JavaScript execution in the NextChat origin. Successful exploitation allows access to JavaScript\u2011readable cookies and other client\u2011side data associated with the NextChat application."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "CWE-79 Improper Neutralization of Input During Web Page Generation (\u0027Cross-site Scripting\u0027)",
              "lang": "en"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-10-27T17:38:13.552Z",
        "orgId": "37e5125f-f79b-445b-8fad-9564f167944b",
        "shortName": "certcc"
      },
      "references": [
        {
          "url": "https://github.com/ChatGPTNextWeb/NextChat"
        }
      ],
      "source": {
        "discovery": "UNKNOWN"
      },
      "title": "CVE-2026-118132",
      "x_generator": {
        "engine": "VINCE 3.0.51",
        "env": "prod",
        "origin": "https://cveawg.mitre.org/api/cve/CVE-2026-118132"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "37e5125f-f79b-445b-8fad-9564f167944b",
    "assignerShortName": "certcc",
    "cveId": "CVE-2026-118132",
    "datePublished": "2026-10-27T17:38:13.552Z",
    "dateReserved": "2026-10-27T17:35:26.020Z",
    "dateUpdated": "2026-10-27T17:38:13.552Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-108311 (GCVE-0-2026-108311)

Vulnerability from cvelistv5 – Published: 2026-10-27 17:35 – Updated: 2026-10-27 17:35

Title

Tanium addressed an insufficient logging vulnerability in Tanium Server.

Summary

Tanium addressed an insufficient logging vulnerability in Tanium Server.

Severity

2.7 (Low)


                        
                          CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:N

CWE

CWE-778 - Insufficient Logging

Assigner

Tanium CNA under the mitre root

CNA scorecard D 59/100 over 37 records in the last 180 days details

References

1 reference

URL	Tags
https://security.tanium.com/TAN-2026-078

Impacted products

1 product

Vendor	Product	Version
Tanium	Tanium Server	Affected: 7.7.3 , < 7.7.3.8351 (custom) Affected: 7.8.2 , < 7.8.2.1263 (custom) Affected: 7.8.4 , < 7.8.4.1399 (custom)

Date Public

2026-10-27 17:26

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "cna": {
      "affected": [
        {
          "product": "Tanium Server",
          "vendor": "Tanium",
          "versions": [
            {
              "lessThan": "7.7.3.8351",
              "status": "affected",
              "version": "7.7.3",
              "versionType": "custom"
            },
            {
              "lessThan": "7.8.2.1263",
              "status": "affected",
              "version": "7.8.2",
              "versionType": "custom"
            },
            {
              "lessThan": "7.8.4.1399",
              "status": "affected",
              "version": "7.8.4",
              "versionType": "custom"
            }
          ]
        }
      ],
      "dateAssigned": "2026-10-09T19:21:27.250Z",
      "datePublic": "2026-10-27T17:26:23.611Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "Tanium addressed an insufficient logging vulnerability in Tanium Server."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "baseScore": 2.7,
            "baseSeverity": "LOW",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:N",
            "version": "3.1"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-778",
              "description": "Insufficient Logging",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-10-27T17:35:43.548Z",
        "orgId": "3938794e-25f5-4123-a1ba-5cbd7f104512",
        "shortName": "Tanium"
      },
      "references": [
        {
          "name": "TAN-2026-078",
          "url": "https://security.tanium.com/TAN-2026-078"
        }
      ],
      "title": "Tanium addressed an insufficient logging vulnerability in Tanium Server."
    }
  },
  "cveMetadata": {
    "assignerOrgId": "3938794e-25f5-4123-a1ba-5cbd7f104512",
    "assignerShortName": "Tanium",
    "cveId": "CVE-2026-108311",
    "datePublished": "2026-10-27T17:35:43.548Z",
    "dateReserved": "2026-10-09T19:21:27.383Z",
    "dateUpdated": "2026-10-27T17:35:43.548Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-108303 (GCVE-0-2026-108303)

Vulnerability from cvelistv5 – Published: 2026-10-27 17:35 – Updated: 2026-10-27 17:35

Title

Tanium addressed an unauthorized code execution vulnerability in Certificate Manager.

Summary

Tanium addressed an unauthorized code execution vulnerability in Certificate Manager.

Severity

8.8 (High)


                        
                          CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

CWE

CWE-77 - Improper Neutralization of Special Elements used in a Command ('Command Injection')

Assigner

Tanium CNA under the mitre root

CNA scorecard D 59/100 over 37 records in the last 180 days details

References

1 reference

URL	Tags
https://security.tanium.com/TAN-2026-075

Impacted products

1 product

Vendor	Product	Version
Tanium	Certificate Manager	Affected: 1.17 , < 1.17.417 (custom) Affected: 1.18 , < 1.18.368 (custom) Affected: 1.22 , < 1.22.119 (custom)

Date Public

2026-10-27 17:26

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "cna": {
      "affected": [
        {
          "product": "Certificate Manager",
          "vendor": "Tanium",
          "versions": [
            {
              "lessThan": "1.17.417",
              "status": "affected",
              "version": "1.17",
              "versionType": "custom"
            },
            {
              "lessThan": "1.18.368",
              "status": "affected",
              "version": "1.18",
              "versionType": "custom"
            },
            {
              "lessThan": "1.22.119",
              "status": "affected",
              "version": "1.22",
              "versionType": "custom"
            }
          ]
        }
      ],
      "dateAssigned": "2026-10-09T19:21:24.393Z",
      "datePublic": "2026-10-27T17:26:22.770Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "Tanium addressed an unauthorized code execution vulnerability in Certificate Manager."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "baseScore": 8.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-77",
              "description": "Improper Neutralization of Special Elements used in a Command (\u0027Command Injection\u0027)",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-10-27T17:35:43.298Z",
        "orgId": "3938794e-25f5-4123-a1ba-5cbd7f104512",
        "shortName": "Tanium"
      },
      "references": [
        {
          "name": "TAN-2026-075",
          "url": "https://security.tanium.com/TAN-2026-075"
        }
      ],
      "title": "Tanium addressed an unauthorized code execution vulnerability in Certificate Manager."
    }
  },
  "cveMetadata": {
    "assignerOrgId": "3938794e-25f5-4123-a1ba-5cbd7f104512",
    "assignerShortName": "Tanium",
    "cveId": "CVE-2026-108303",
    "datePublished": "2026-10-27T17:35:43.298Z",
    "dateReserved": "2026-10-09T19:21:24.565Z",
    "dateUpdated": "2026-10-27T17:35:43.298Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-108316 (GCVE-0-2026-108316)

Vulnerability from cvelistv5 – Published: 2026-10-27 17:35 – Updated: 2026-10-27 17:35

Title

Tanium addressed an information disclosure vulnerability in Tanium Server.

Summary

Tanium addressed an information disclosure vulnerability in Tanium Server.

Severity

4.3 (Medium)


                        
                          CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

CWE

CWE-209 - Generation of Error Message Containing Sensitive Information

Assigner

Tanium CNA under the mitre root

CNA scorecard D 59/100 over 37 records in the last 180 days details

References

1 reference

URL	Tags
https://security.tanium.com/TAN-2026-062

Impacted products

1 product

Vendor	Product	Version
Tanium	Tanium Server	Affected: 7.7.3 , < 7.7.3.8351 (custom) Affected: 7.8.2 , < 7.8.2.1263 (custom) Affected: 7.8.4 , < 7.8.4.1399 (custom)

Date Public

2026-10-27 17:26

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "cna": {
      "affected": [
        {
          "product": "Tanium Server",
          "vendor": "Tanium",
          "versions": [
            {
              "lessThan": "7.7.3.8351",
              "status": "affected",
              "version": "7.7.3",
              "versionType": "custom"
            },
            {
              "lessThan": "7.8.2.1263",
              "status": "affected",
              "version": "7.8.2",
              "versionType": "custom"
            },
            {
              "lessThan": "7.8.4.1399",
              "status": "affected",
              "version": "7.8.4",
              "versionType": "custom"
            }
          ]
        }
      ],
      "dateAssigned": "2026-10-09T19:21:29.009Z",
      "datePublic": "2026-10-27T17:26:18.635Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "Tanium addressed an information disclosure vulnerability in Tanium Server."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "baseScore": 4.3,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
            "version": "3.1"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-209",
              "description": "Generation of Error Message Containing Sensitive Information",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-10-27T17:35:43.092Z",
        "orgId": "3938794e-25f5-4123-a1ba-5cbd7f104512",
        "shortName": "Tanium"
      },
      "references": [
        {
          "name": "TAN-2026-062",
          "url": "https://security.tanium.com/TAN-2026-062"
        }
      ],
      "title": "Tanium addressed an information disclosure vulnerability in Tanium Server."
    }
  },
  "cveMetadata": {
    "assignerOrgId": "3938794e-25f5-4123-a1ba-5cbd7f104512",
    "assignerShortName": "Tanium",
    "cveId": "CVE-2026-108316",
    "datePublished": "2026-10-27T17:35:43.092Z",
    "dateReserved": "2026-10-09T19:21:29.182Z",
    "dateUpdated": "2026-10-27T17:35:43.092Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-116656 (GCVE-0-2026-116656)

Vulnerability from cvelistv5 – Published: 2026-10-27 17:35 – Updated: 2026-10-27 17:35

Title

Tanium addressed an uncontrolled resource consumption vulnerability in Enforce.

Summary

Tanium addressed an uncontrolled resource consumption vulnerability in Enforce.

Severity

7.5 (High)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

CWE

CWE-400 - Uncontrolled Resource Consumption

Assigner

Tanium CNA under the mitre root

CNA scorecard D 59/100 over 37 records in the last 180 days details

References

1 reference

URL	Tags
https://security.tanium.com/TAN-2026-071

Impacted products

1 product

Vendor	Product	Version
Tanium	Enforce	Affected: 2.9 , < 2.9.736 (custom) Affected: 2.10 , < 2.10.778 (custom) Affected: 3.0 , < 3.0.373 (custom)

Date Public

2026-10-27 17:26

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "cna": {
      "affected": [
        {
          "product": "Enforce",
          "vendor": "Tanium",
          "versions": [
            {
              "lessThan": "2.9.736",
              "status": "affected",
              "version": "2.9",
              "versionType": "custom"
            },
            {
              "lessThan": "2.10.778",
              "status": "affected",
              "version": "2.10",
              "versionType": "custom"
            },
            {
              "lessThan": "3.0.373",
              "status": "affected",
              "version": "3.0",
              "versionType": "custom"
            }
          ]
        }
      ],
      "dateAssigned": "2026-10-26T19:15:06.278Z",
      "datePublic": "2026-10-27T17:26:21.394Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "Tanium addressed an uncontrolled resource consumption vulnerability in Enforce."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-400",
              "description": "Uncontrolled Resource Consumption",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-10-27T17:35:42.916Z",
        "orgId": "3938794e-25f5-4123-a1ba-5cbd7f104512",
        "shortName": "Tanium"
      },
      "references": [
        {
          "name": "TAN-2026-071",
          "url": "https://security.tanium.com/TAN-2026-071"
        }
      ],
      "title": "Tanium addressed an uncontrolled resource consumption vulnerability in Enforce."
    }
  },
  "cveMetadata": {
    "assignerOrgId": "3938794e-25f5-4123-a1ba-5cbd7f104512",
    "assignerShortName": "Tanium",
    "cveId": "CVE-2026-116656",
    "datePublished": "2026-10-27T17:35:42.916Z",
    "dateReserved": "2026-10-26T19:15:06.430Z",
    "dateUpdated": "2026-10-27T17:35:42.916Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-108325 (GCVE-0-2026-108325)

Vulnerability from cvelistv5 – Published: 2026-10-27 17:35 – Updated: 2026-10-27 17:35

Title

Tanium addressed an insertion of sensitive information into log file vulnerability in Reputation.

Summary

Tanium addressed an insertion of sensitive information into log file vulnerability in Reputation.

Severity

6.6 (Medium)


                        
                          CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H

CWE

CWE-532 - Insertion of Sensitive Information into Log File

Assigner

Tanium CNA under the mitre root

CNA scorecard D 59/100 over 37 records in the last 180 days details

References

1 reference

URL	Tags
https://security.tanium.com/TAN-2026-067

Impacted products

1 product

Vendor	Product	Version
Tanium	Reputation	Affected: 6.6 , < 6.6.145 (custom) Affected: 6.7 , < 6.7.138 (custom) Affected: 6.8 , < 6.8.162 (custom)

Date Public

2026-10-27 17:26

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "cna": {
      "affected": [
        {
          "product": "Reputation",
          "vendor": "Tanium",
          "versions": [
            {
              "lessThan": "6.6.145",
              "status": "affected",
              "version": "6.6",
              "versionType": "custom"
            },
            {
              "lessThan": "6.7.138",
              "status": "affected",
              "version": "6.7",
              "versionType": "custom"
            },
            {
              "lessThan": "6.8.162",
              "status": "affected",
              "version": "6.8",
              "versionType": "custom"
            }
          ]
        }
      ],
      "dateAssigned": "2026-10-09T19:21:32.264Z",
      "datePublic": "2026-10-27T17:26:20.299Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "Tanium addressed an insertion of sensitive information into log file vulnerability in Reputation."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "baseScore": 6.6,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-532",
              "description": "Insertion of Sensitive Information into Log File",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-10-27T17:35:42.735Z",
        "orgId": "3938794e-25f5-4123-a1ba-5cbd7f104512",
        "shortName": "Tanium"
      },
      "references": [
        {
          "name": "TAN-2026-067",
          "url": "https://security.tanium.com/TAN-2026-067"
        }
      ],
      "title": "Tanium addressed an insertion of sensitive information into log file vulnerability in Reputation."
    }
  },
  "cveMetadata": {
    "assignerOrgId": "3938794e-25f5-4123-a1ba-5cbd7f104512",
    "assignerShortName": "Tanium",
    "cveId": "CVE-2026-108325",
    "datePublished": "2026-10-27T17:35:42.735Z",
    "dateReserved": "2026-10-09T19:21:32.389Z",
    "dateUpdated": "2026-10-27T17:35:42.735Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-116659 (GCVE-0-2026-116659)

Vulnerability from cvelistv5 – Published: 2026-10-27 17:35 – Updated: 2026-10-27 17:35

Title

Tanium addressed an uncontrolled resource consumption vulnerability in Enforce.

Summary

Tanium addressed an uncontrolled resource consumption vulnerability in Enforce.

Severity

4.3 (Medium)


                        
                          CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L

CWE

CWE-770 - Allocation of Resources Without Limits or Throttling

Assigner

Tanium CNA under the mitre root

CNA scorecard D 59/100 over 37 records in the last 180 days details

References

1 reference

URL	Tags
https://security.tanium.com/TAN-2026-077

Impacted products

1 product

Vendor	Product	Version
Tanium	Enforce	Affected: 2.9 , < 2.9.736 (custom) Affected: 2.10 , < 2.10.778 (custom) Affected: 3.0 , < 3.0.373 (custom)

Date Public

2026-10-27 17:26

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "cna": {
      "affected": [
        {
          "product": "Enforce",
          "vendor": "Tanium",
          "versions": [
            {
              "lessThan": "2.9.736",
              "status": "affected",
              "version": "2.9",
              "versionType": "custom"
            },
            {
              "lessThan": "2.10.778",
              "status": "affected",
              "version": "2.10",
              "versionType": "custom"
            },
            {
              "lessThan": "3.0.373",
              "status": "affected",
              "version": "3.0",
              "versionType": "custom"
            }
          ]
        }
      ],
      "dateAssigned": "2026-10-26T19:15:07.480Z",
      "datePublic": "2026-10-27T17:26:23.333Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "Tanium addressed an uncontrolled resource consumption vulnerability in Enforce."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "baseScore": 4.3,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L",
            "version": "3.1"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-770",
              "description": "Allocation of Resources Without Limits or Throttling",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-10-27T17:35:42.543Z",
        "orgId": "3938794e-25f5-4123-a1ba-5cbd7f104512",
        "shortName": "Tanium"
      },
      "references": [
        {
          "name": "TAN-2026-077",
          "url": "https://security.tanium.com/TAN-2026-077"
        }
      ],
      "title": "Tanium addressed an uncontrolled resource consumption vulnerability in Enforce."
    }
  },
  "cveMetadata": {
    "assignerOrgId": "3938794e-25f5-4123-a1ba-5cbd7f104512",
    "assignerShortName": "Tanium",
    "cveId": "CVE-2026-116659",
    "datePublished": "2026-10-27T17:35:42.543Z",
    "dateReserved": "2026-10-26T19:15:07.631Z",
    "dateUpdated": "2026-10-27T17:35:42.543Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-108302 (GCVE-0-2026-108302)

Vulnerability from cvelistv5 – Published: 2026-10-27 17:35 – Updated: 2026-10-27 17:35

Title

Tanium addressed an improper access controls vulnerability in Comply.

Summary

Tanium addressed an improper access controls vulnerability in Comply.

Severity

4.3 (Medium)


                        
                          CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

CWE

CWE-863 - Incorrect Authorization

Assigner

Tanium CNA under the mitre root

CNA scorecard D 59/100 over 37 records in the last 180 days details

References

1 reference

URL	Tags
https://security.tanium.com/TAN-2026-073

Impacted products

1 product

Vendor	Product	Version
Tanium	Comply	Affected: 2.32 , < 2.32.263 (custom) Affected: 2.35 , < 2.35.323 (custom) Affected: 2.37 , < 2.37.326 (custom)

Date Public

2026-10-27 17:26

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "cna": {
      "affected": [
        {
          "product": "Comply",
          "vendor": "Tanium",
          "versions": [
            {
              "lessThan": "2.32.263",
              "status": "affected",
              "version": "2.32",
              "versionType": "custom"
            },
            {
              "lessThan": "2.35.323",
              "status": "affected",
              "version": "2.35",
              "versionType": "custom"
            },
            {
              "lessThan": "2.37.326",
              "status": "affected",
              "version": "2.37",
              "versionType": "custom"
            }
          ]
        }
      ],
      "dateAssigned": "2026-10-09T19:21:24.023Z",
      "datePublic": "2026-10-27T17:26:21.956Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "Tanium addressed an improper access controls vulnerability in Comply."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "baseScore": 4.3,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
            "version": "3.1"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-863",
              "description": "Incorrect Authorization",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-10-27T17:35:42.350Z",
        "orgId": "3938794e-25f5-4123-a1ba-5cbd7f104512",
        "shortName": "Tanium"
      },
      "references": [
        {
          "name": "TAN-2026-073",
          "url": "https://security.tanium.com/TAN-2026-073"
        }
      ],
      "title": "Tanium addressed an improper access controls vulnerability in Comply."
    }
  },
  "cveMetadata": {
    "assignerOrgId": "3938794e-25f5-4123-a1ba-5cbd7f104512",
    "assignerShortName": "Tanium",
    "cveId": "CVE-2026-108302",
    "datePublished": "2026-10-27T17:35:42.350Z",
    "dateReserved": "2026-10-09T19:21:24.198Z",
    "dateUpdated": "2026-10-27T17:35:42.350Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-108306 (GCVE-0-2026-108306)

Vulnerability from cvelistv5 – Published: 2026-10-27 17:35 – Updated: 2026-10-27 17:35

Title

Tanium addressed a local privilege escalation vulnerability in End-User Notifications.

Summary

Tanium addressed a local privilege escalation vulnerability in End-User Notifications.

Severity

7.8 (High)


                        
                          CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

CWE

CWE-59 - Improper Link Resolution Before File Access ('Link Following')

Assigner

Tanium CNA under the mitre root

CNA scorecard D 59/100 over 37 records in the last 180 days details

References

1 reference

URL	Tags
https://security.tanium.com/TAN-2026-065

Impacted products

2 products

Vendor	Product	Version
Tanium	Endpoint Configuration Toolset Solution	Affected: 1.51 , < 1.51.60 (custom) Affected: 1.59 , < 1.59.50 (custom) Affected: 1.71 , < 1.71.25 (custom)
Tanium	end-user-cx	Affected: 1.8.47 , < 1.8.47 (semver) Affected: 1.11.605 , < 1.11.605 (semver) Affected: 1.19.325 , < 1.19.325 (semver) Affected: 1.21.835 , < 1.21.835 (semver) Affected: 1.22.1199 , < 1.22.1199 (semver) Affected: 1.23.766 , < 1.23.766 (semver) Affected: 1.24.590 , < 1.24.590 (semver)

Date Public

2026-10-27 17:26

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "cna": {
      "affected": [
        {
          "product": "Endpoint Configuration Toolset Solution",
          "vendor": "Tanium",
          "versions": [
            {
              "lessThan": "1.51.60",
              "status": "affected",
              "version": "1.51",
              "versionType": "custom"
            },
            {
              "lessThan": "1.59.50",
              "status": "affected",
              "version": "1.59",
              "versionType": "custom"
            },
            {
              "lessThan": "1.71.25",
              "status": "affected",
              "version": "1.71",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "end-user-cx",
          "vendor": "Tanium",
          "versions": [
            {
              "lessThan": "1.8.47",
              "status": "affected",
              "version": "1.8.47",
              "versionType": "semver"
            },
            {
              "lessThan": "1.11.605",
              "status": "affected",
              "version": "1.11.605",
              "versionType": "semver"
            },
            {
              "lessThan": "1.19.325",
              "status": "affected",
              "version": "1.19.325",
              "versionType": "semver"
            },
            {
              "lessThan": "1.21.835",
              "status": "affected",
              "version": "1.21.835",
              "versionType": "semver"
            },
            {
              "lessThan": "1.22.1199",
              "status": "affected",
              "version": "1.22.1199",
              "versionType": "semver"
            },
            {
              "lessThan": "1.23.766",
              "status": "affected",
              "version": "1.23.766",
              "versionType": "semver"
            },
            {
              "lessThan": "1.24.590",
              "status": "affected",
              "version": "1.24.590",
              "versionType": "semver"
            }
          ]
        }
      ],
      "dateAssigned": "2026-10-09T19:21:25.468Z",
      "datePublic": "2026-10-27T17:26:19.759Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "Tanium addressed a local privilege escalation vulnerability in End-User Notifications."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-59",
              "description": "Improper Link Resolution Before File Access (\u0027Link Following\u0027)",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-10-27T17:35:42.154Z",
        "orgId": "3938794e-25f5-4123-a1ba-5cbd7f104512",
        "shortName": "Tanium"
      },
      "references": [
        {
          "name": "TAN-2026-065",
          "url": "https://security.tanium.com/TAN-2026-065"
        }
      ],
      "title": "Tanium addressed a local privilege escalation vulnerability in End-User Notifications."
    }
  },
  "cveMetadata": {
    "assignerOrgId": "3938794e-25f5-4123-a1ba-5cbd7f104512",
    "assignerShortName": "Tanium",
    "cveId": "CVE-2026-108306",
    "datePublished": "2026-10-27T17:35:42.154Z",
    "dateReserved": "2026-10-09T19:21:25.635Z",
    "dateUpdated": "2026-10-27T17:35:42.154Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-108329 (GCVE-0-2026-108329)

Vulnerability from cvelistv5 – Published: 2026-10-27 17:35 – Updated: 2026-10-27 17:35

Title

Tanium addressed an unauthorized code execution vulnerability in Threat Response.

Summary

Tanium addressed an unauthorized code execution vulnerability in Threat Response.

Severity

8.8 (High)


                        
                          CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

CWE

CWE-77 - Improper Neutralization of Special Elements used in a Command ('Command Injection')

Assigner

Tanium CNA under the mitre root

CNA scorecard D 59/100 over 37 records in the last 180 days details

References

1 reference

URL	Tags
https://security.tanium.com/TAN-2026-064

Impacted products

1 product

Vendor	Product	Version
Tanium	Threat Response	Affected: 4.9 , < 4.9.476 (custom) Affected: 4.12 , < 4.12.349 (custom) Affected: 4.17 , < 4.17.327 (custom)

Date Public

2026-10-27 17:26

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "cna": {
      "affected": [
        {
          "product": "Threat Response",
          "vendor": "Tanium",
          "versions": [
            {
              "lessThan": "4.9.476",
              "status": "affected",
              "version": "4.9",
              "versionType": "custom"
            },
            {
              "lessThan": "4.12.349",
              "status": "affected",
              "version": "4.12",
              "versionType": "custom"
            },
            {
              "lessThan": "4.17.327",
              "status": "affected",
              "version": "4.17",
              "versionType": "custom"
            }
          ]
        }
      ],
      "dateAssigned": "2026-10-09T19:21:33.643Z",
      "datePublic": "2026-10-27T17:26:19.471Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "Tanium addressed an unauthorized code execution vulnerability in Threat Response."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "baseScore": 8.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-77",
              "description": "Improper Neutralization of Special Elements used in a Command (\u0027Command Injection\u0027)",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-10-27T17:35:41.970Z",
        "orgId": "3938794e-25f5-4123-a1ba-5cbd7f104512",
        "shortName": "Tanium"
      },
      "references": [
        {
          "name": "TAN-2026-064",
          "url": "https://security.tanium.com/TAN-2026-064"
        }
      ],
      "title": "Tanium addressed an unauthorized code execution vulnerability in Threat Response."
    }
  },
  "cveMetadata": {
    "assignerOrgId": "3938794e-25f5-4123-a1ba-5cbd7f104512",
    "assignerShortName": "Tanium",
    "cveId": "CVE-2026-108329",
    "datePublished": "2026-10-27T17:35:41.970Z",
    "dateReserved": "2026-10-09T19:21:33.766Z",
    "dateUpdated": "2026-10-27T17:35:41.970Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-108332 (GCVE-0-2026-108332)

Vulnerability from cvelistv5 – Published: 2026-10-27 17:35 – Updated: 2026-10-27 17:35

Title

Tanium addressed an improper link resolution before file access vulnerability in Threat Response Client Extension.

Summary

Tanium addressed an improper link resolution before file access vulnerability in Threat Response Client Extension.

Severity

6.3 (Medium)


                        
                          CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:N

CWE

CWE-59 - Improper Link Resolution Before File Access ('Link Following')

Assigner

Tanium CNA under the mitre root

CNA scorecard D 59/100 over 37 records in the last 180 days details

References

1 reference

URL	Tags
https://security.tanium.com/TAN-2026-055

Impacted products

2 products

Vendor	Product	Version
Tanium	Endpoint Configuration Toolset Solution	Affected: 1.51.0 , < 1.51.60 (custom) Affected: 1.59.0 , < 1.59.50 (custom) Affected: 1.71.0 , < 1.71.25 (custom)
Tanium	threat-response-cx	Affected: 1.17.802 , < 1.17.802 (semver) Affected: 1.18.2732 , < 1.18.2732 (semver) Affected: 1.19.2213 , < 1.19.2213 (semver) Affected: 1.20.2271 , < 1.20.2271 (semver) Affected: 1.21.1673 , < 1.21.1673 (semver)

Date Public

2026-10-27 17:26

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "cna": {
      "affected": [
        {
          "product": "Endpoint Configuration Toolset Solution",
          "vendor": "Tanium",
          "versions": [
            {
              "lessThan": "1.51.60",
              "status": "affected",
              "version": "1.51.0",
              "versionType": "custom"
            },
            {
              "lessThan": "1.59.50",
              "status": "affected",
              "version": "1.59.0",
              "versionType": "custom"
            },
            {
              "lessThan": "1.71.25",
              "status": "affected",
              "version": "1.71.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "threat-response-cx",
          "vendor": "Tanium",
          "versions": [
            {
              "lessThan": "1.17.802",
              "status": "affected",
              "version": "1.17.802",
              "versionType": "semver"
            },
            {
              "lessThan": "1.18.2732",
              "status": "affected",
              "version": "1.18.2732",
              "versionType": "semver"
            },
            {
              "lessThan": "1.19.2213",
              "status": "affected",
              "version": "1.19.2213",
              "versionType": "semver"
            },
            {
              "lessThan": "1.20.2271",
              "status": "affected",
              "version": "1.20.2271",
              "versionType": "semver"
            },
            {
              "lessThan": "1.21.1673",
              "status": "affected",
              "version": "1.21.1673",
              "versionType": "semver"
            }
          ]
        }
      ],
      "dateAssigned": "2026-10-09T19:21:34.683Z",
      "datePublic": "2026-10-27T17:26:16.663Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "Tanium addressed an improper link resolution before file access vulnerability in Threat Response Client Extension."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "baseScore": 6.3,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:N",
            "version": "3.1"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-59",
              "description": "Improper Link Resolution Before File Access (\u0027Link Following\u0027)",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-10-27T17:35:41.790Z",
        "orgId": "3938794e-25f5-4123-a1ba-5cbd7f104512",
        "shortName": "Tanium"
      },
      "references": [
        {
          "name": "TAN-2026-055",
          "url": "https://security.tanium.com/TAN-2026-055"
        }
      ],
      "title": "Tanium addressed an improper link resolution before file access vulnerability in Threat Response Client Extension."
    }
  },
  "cveMetadata": {
    "assignerOrgId": "3938794e-25f5-4123-a1ba-5cbd7f104512",
    "assignerShortName": "Tanium",
    "cveId": "CVE-2026-108332",
    "datePublished": "2026-10-27T17:35:41.790Z",
    "dateReserved": "2026-10-09T19:21:34.846Z",
    "dateUpdated": "2026-10-27T17:35:41.790Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-108301 (GCVE-0-2026-108301)

Vulnerability from cvelistv5 – Published: 2026-10-27 17:35 – Updated: 2026-10-27 17:35

Title

Tanium addressed an improper access controls vulnerability in Comply.

Summary

Tanium addressed an improper access controls vulnerability in Comply.

Severity

6 (Medium)


                        
                          CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:L/I:L/A:L

CWE

CWE-862 - Missing Authorization

Assigner

Tanium CNA under the mitre root

CNA scorecard D 59/100 over 37 records in the last 180 days details

References

1 reference

URL	Tags
https://security.tanium.com/TAN-2026-066

Impacted products

1 product

Vendor	Product	Version
Tanium	Comply	Affected: 2.32 , < 2.32.263 (custom) Affected: 2.35 , < 2.35.323 (custom) Affected: 2.37 , < 2.37.326 (custom)

Date Public

2026-10-27 17:26

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "cna": {
      "affected": [
        {
          "product": "Comply",
          "vendor": "Tanium",
          "versions": [
            {
              "lessThan": "2.32.263",
              "status": "affected",
              "version": "2.32",
              "versionType": "custom"
            },
            {
              "lessThan": "2.35.323",
              "status": "affected",
              "version": "2.35",
              "versionType": "custom"
            },
            {
              "lessThan": "2.37.326",
              "status": "affected",
              "version": "2.37",
              "versionType": "custom"
            }
          ]
        }
      ],
      "dateAssigned": "2026-10-09T19:20:54.787Z",
      "datePublic": "2026-10-27T17:26:20.033Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "Tanium addressed an improper access controls vulnerability in Comply."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "baseScore": 6,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:L/I:L/A:L",
            "version": "3.1"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-862",
              "description": "Missing Authorization",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-10-27T17:35:24.243Z",
        "orgId": "3938794e-25f5-4123-a1ba-5cbd7f104512",
        "shortName": "Tanium"
      },
      "references": [
        {
          "name": "TAN-2026-066",
          "url": "https://security.tanium.com/TAN-2026-066"
        }
      ],
      "title": "Tanium addressed an improper access controls vulnerability in Comply."
    }
  },
  "cveMetadata": {
    "assignerOrgId": "3938794e-25f5-4123-a1ba-5cbd7f104512",
    "assignerShortName": "Tanium",
    "cveId": "CVE-2026-108301",
    "datePublished": "2026-10-27T17:35:24.243Z",
    "dateReserved": "2026-10-09T19:20:55.306Z",
    "dateUpdated": "2026-10-27T17:35:24.243Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-108304 (GCVE-0-2026-108304)

Vulnerability from cvelistv5 – Published: 2026-10-27 17:35 – Updated: 2026-10-27 17:35

Title

Tanium addressed a local privilege escalation vulnerability in End-User Notifications.

Summary

Tanium addressed a local privilege escalation vulnerability in End-User Notifications.

Severity

7.8 (High)


                        
                          CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

CWE

CWE-59 - Improper Link Resolution Before File Access ('Link Following')
CWE-282 - Improper Ownership Management

Assigner

Tanium CNA under the mitre root

CNA scorecard D 59/100 over 37 records in the last 180 days details

References

1 reference

URL	Tags
https://security.tanium.com/TAN-2026-058

Impacted products

2 products

Vendor	Product	Version
Tanium	Endpoint Configuration Toolset Solution	Affected: 1.51 , < 1.51.60 (custom) Affected: 1.59 , < 1.59.50 (custom) Affected: 1.71 , < 1.71.25 (custom)
Tanium	end-user-cx	Affected: 1.8.47 , < 1.8.47 (semver) Affected: 1.11.605 , < 1.11.605 (semver) Affected: 1.19.325 , < 1.19.325 (semver) Affected: 1.21.835 , < 1.21.835 (semver) Affected: 1.22.1199 , < 1.22.1199 (semver) Affected: 1.23.766 , < 1.23.766 (semver) Affected: 1.24.590 , < 1.24.590 (semver)

Date Public

2026-10-27 17:26

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "cna": {
      "affected": [
        {
          "product": "Endpoint Configuration Toolset Solution",
          "vendor": "Tanium",
          "versions": [
            {
              "lessThan": "1.51.60",
              "status": "affected",
              "version": "1.51",
              "versionType": "custom"
            },
            {
              "lessThan": "1.59.50",
              "status": "affected",
              "version": "1.59",
              "versionType": "custom"
            },
            {
              "lessThan": "1.71.25",
              "status": "affected",
              "version": "1.71",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "end-user-cx",
          "vendor": "Tanium",
          "versions": [
            {
              "lessThan": "1.8.47",
              "status": "affected",
              "version": "1.8.47",
              "versionType": "semver"
            },
            {
              "lessThan": "1.11.605",
              "status": "affected",
              "version": "1.11.605",
              "versionType": "semver"
            },
            {
              "lessThan": "1.19.325",
              "status": "affected",
              "version": "1.19.325",
              "versionType": "semver"
            },
            {
              "lessThan": "1.21.835",
              "status": "affected",
              "version": "1.21.835",
              "versionType": "semver"
            },
            {
              "lessThan": "1.22.1199",
              "status": "affected",
              "version": "1.22.1199",
              "versionType": "semver"
            },
            {
              "lessThan": "1.23.766",
              "status": "affected",
              "version": "1.23.766",
              "versionType": "semver"
            },
            {
              "lessThan": "1.24.590",
              "status": "affected",
              "version": "1.24.590",
              "versionType": "semver"
            }
          ]
        }
      ],
      "dateAssigned": "2026-10-09T19:21:24.751Z",
      "datePublic": "2026-10-27T17:26:17.500Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "Tanium addressed a local privilege escalation vulnerability in End-User Notifications."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-59",
              "description": "Improper Link Resolution Before File Access (\u0027Link Following\u0027)",
              "lang": "en",
              "type": "CWE"
            }
          ]
        },
        {
          "descriptions": [
            {
              "cweId": "CWE-282",
              "description": "Improper Ownership Management",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-10-27T17:35:24.064Z",
        "orgId": "3938794e-25f5-4123-a1ba-5cbd7f104512",
        "shortName": "Tanium"
      },
      "references": [
        {
          "name": "TAN-2026-058",
          "url": "https://security.tanium.com/TAN-2026-058"
        }
      ],
      "title": "Tanium addressed a local privilege escalation vulnerability in End-User Notifications."
    }
  },
  "cveMetadata": {
    "assignerOrgId": "3938794e-25f5-4123-a1ba-5cbd7f104512",
    "assignerShortName": "Tanium",
    "cveId": "CVE-2026-108304",
    "datePublished": "2026-10-27T17:35:24.064Z",
    "dateReserved": "2026-10-09T19:21:24.929Z",
    "dateUpdated": "2026-10-27T17:35:24.064Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-87086 (GCVE-0-2026-87086)

Vulnerability from cvelistv5 – Published: 2026-10-27 17:35 – Updated: 2026-10-27 17:35

Title

Tanium addressed a denial of service vulnerability in Provision.

Summary

Tanium addressed a denial of service vulnerability in Provision.

Severity

7.5 (High)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

CWE

CWE-690 - Unchecked Return Value to NULL Pointer Dereference

Assigner

Tanium CNA under the mitre root

CNA scorecard D 59/100 over 37 records in the last 180 days details

References

1 reference

URL	Tags
https://security.tanium.com/TAN-2026-080

Impacted products

1 product

Vendor	Product	Version
Tanium	Provision	Affected: 1.17 , < 1.17.150 (custom) Affected: 1.23 , < 1.23.161 (custom) Affected: 1.24 , < 1.24.199 (custom)

Date Public

2026-10-27 17:26

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "cna": {
      "affected": [
        {
          "product": "Provision",
          "vendor": "Tanium",
          "versions": [
            {
              "lessThan": "1.17.150",
              "status": "affected",
              "version": "1.17",
              "versionType": "custom"
            },
            {
              "lessThan": "1.23.161",
              "status": "affected",
              "version": "1.23",
              "versionType": "custom"
            },
            {
              "lessThan": "1.24.199",
              "status": "affected",
              "version": "1.24",
              "versionType": "custom"
            }
          ]
        }
      ],
      "dateAssigned": "2026-09-08T19:38:21.409Z",
      "datePublic": "2026-10-27T17:26:22.493Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "Tanium addressed a denial of service vulnerability in Provision."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-690",
              "description": "Unchecked Return Value to NULL Pointer Dereference",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-10-27T17:35:23.877Z",
        "orgId": "3938794e-25f5-4123-a1ba-5cbd7f104512",
        "shortName": "Tanium"
      },
      "references": [
        {
          "name": "TAN-2026-080",
          "url": "https://security.tanium.com/TAN-2026-080"
        }
      ],
      "title": "Tanium addressed a denial of service vulnerability in Provision."
    }
  },
  "cveMetadata": {
    "assignerOrgId": "3938794e-25f5-4123-a1ba-5cbd7f104512",
    "assignerShortName": "Tanium",
    "cveId": "CVE-2026-87086",
    "datePublished": "2026-10-27T17:35:23.877Z",
    "dateReserved": "2026-09-08T19:38:21.885Z",
    "dateUpdated": "2026-10-27T17:35:23.877Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-108309 (GCVE-0-2026-108309)

Vulnerability from cvelistv5 – Published: 2026-10-27 17:35 – Updated: 2026-10-27 17:35

Title

Tanium addressed an uncontrolled resource consumption vulnerability in Performance Client Extension.

Summary

Tanium addressed an uncontrolled resource consumption vulnerability in Performance Client Extension.

Severity

5.5 (Medium)


                        
                          CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

CWE

CWE-770 - Allocation of Resources Without Limits or Throttling

Assigner

Tanium CNA under the mitre root

CNA scorecard D 59/100 over 37 records in the last 180 days details

References

1 reference

URL	Tags
https://security.tanium.com/TAN-2026-070

Impacted products

2 products

Vendor	Product	Version
Tanium	Endpoint Configuration Toolset Solution	Affected: 1.51 , < 1.51.60 (custom) Affected: 1.59 , < 1.59.50 (custom) Affected: 1.71 , < 1.71.25 (custom)
Tanium	performance-cx	Affected: 2.7.648 , < 2.7.648 (semver) Affected: 2.8.2110 , < 2.8.2110 (semver) Affected: 2.9.1165 , < 2.9.1165 (semver) Affected: 2.11.1312 , < 2.11.1312 (semver) Affected: 2.13.1010 , < 2.13.1010 (semver) Affected: 2.14.56 , < 2.14.56 (semver)

Date Public

2026-10-27 17:26

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "cna": {
      "affected": [
        {
          "product": "Endpoint Configuration Toolset Solution",
          "vendor": "Tanium",
          "versions": [
            {
              "lessThan": "1.51.60",
              "status": "affected",
              "version": "1.51",
              "versionType": "custom"
            },
            {
              "lessThan": "1.59.50",
              "status": "affected",
              "version": "1.59",
              "versionType": "custom"
            },
            {
              "lessThan": "1.71.25",
              "status": "affected",
              "version": "1.71",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "performance-cx",
          "vendor": "Tanium",
          "versions": [
            {
              "lessThan": "2.7.648",
              "status": "affected",
              "version": "2.7.648",
              "versionType": "semver"
            },
            {
              "lessThan": "2.8.2110",
              "status": "affected",
              "version": "2.8.2110",
              "versionType": "semver"
            },
            {
              "lessThan": "2.9.1165",
              "status": "affected",
              "version": "2.9.1165",
              "versionType": "semver"
            },
            {
              "lessThan": "2.11.1312",
              "status": "affected",
              "version": "2.11.1312",
              "versionType": "semver"
            },
            {
              "lessThan": "2.13.1010",
              "status": "affected",
              "version": "2.13.1010",
              "versionType": "semver"
            },
            {
              "lessThan": "2.14.56",
              "status": "affected",
              "version": "2.14.56",
              "versionType": "semver"
            }
          ]
        }
      ],
      "dateAssigned": "2026-10-09T19:21:26.548Z",
      "datePublic": "2026-10-27T17:26:21.130Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "Tanium addressed an uncontrolled resource consumption vulnerability in Performance Client Extension."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "baseScore": 5.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-770",
              "description": "Allocation of Resources Without Limits or Throttling",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-10-27T17:35:23.693Z",
        "orgId": "3938794e-25f5-4123-a1ba-5cbd7f104512",
        "shortName": "Tanium"
      },
      "references": [
        {
          "name": "TAN-2026-070",
          "url": "https://security.tanium.com/TAN-2026-070"
        }
      ],
      "title": "Tanium addressed an uncontrolled resource consumption vulnerability in Performance Client Extension."
    }
  },
  "cveMetadata": {
    "assignerOrgId": "3938794e-25f5-4123-a1ba-5cbd7f104512",
    "assignerShortName": "Tanium",
    "cveId": "CVE-2026-108309",
    "datePublished": "2026-10-27T17:35:23.693Z",
    "dateReserved": "2026-10-09T19:21:26.706Z",
    "dateUpdated": "2026-10-27T17:35:23.693Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-116658 (GCVE-0-2026-116658)

Vulnerability from cvelistv5 – Published: 2026-10-27 17:35 – Updated: 2026-10-27 17:35

Title

Tanium addressed a denial of service vulnerability in Enforce.

Summary

Tanium addressed a denial of service vulnerability in Enforce.

Severity

6.5 (Medium)


                        
                          CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

CWE

CWE-476 - NULL Pointer Dereference

Assigner

Tanium CNA under the mitre root

CNA scorecard D 59/100 over 37 records in the last 180 days details

References

1 reference

URL	Tags
https://security.tanium.com/TAN-2026-074

Impacted products

1 product

Vendor	Product	Version
Tanium	Enforce	Affected: 2.9 , < 2.9.736 (custom) Affected: 2.10 , < 2.10.778 (custom) Affected: 3.0 , < 3.0.373 (custom)

Date Public

2026-10-27 17:26

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "cna": {
      "affected": [
        {
          "product": "Enforce",
          "vendor": "Tanium",
          "versions": [
            {
              "lessThan": "2.9.736",
              "status": "affected",
              "version": "2.9",
              "versionType": "custom"
            },
            {
              "lessThan": "2.10.778",
              "status": "affected",
              "version": "2.10",
              "versionType": "custom"
            },
            {
              "lessThan": "3.0.373",
              "status": "affected",
              "version": "3.0",
              "versionType": "custom"
            }
          ]
        }
      ],
      "dateAssigned": "2026-10-26T19:15:07.095Z",
      "datePublic": "2026-10-27T17:26:22.232Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "Tanium addressed a denial of service vulnerability in Enforce."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-476",
              "description": "NULL Pointer Dereference",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-10-27T17:35:23.506Z",
        "orgId": "3938794e-25f5-4123-a1ba-5cbd7f104512",
        "shortName": "Tanium"
      },
      "references": [
        {
          "name": "TAN-2026-074",
          "url": "https://security.tanium.com/TAN-2026-074"
        }
      ],
      "title": "Tanium addressed a denial of service vulnerability in Enforce."
    }
  },
  "cveMetadata": {
    "assignerOrgId": "3938794e-25f5-4123-a1ba-5cbd7f104512",
    "assignerShortName": "Tanium",
    "cveId": "CVE-2026-116658",
    "datePublished": "2026-10-27T17:35:23.506Z",
    "dateReserved": "2026-10-26T19:15:07.239Z",
    "dateUpdated": "2026-10-27T17:35:23.506Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-108313 (GCVE-0-2026-108313)

Vulnerability from cvelistv5 – Published: 2026-10-27 17:35 – Updated: 2026-10-27 17:35

Title

Tanium addressed an incorrect privilege assignment vulnerability in Tanium Server.

Summary

Tanium addressed an incorrect privilege assignment vulnerability in Tanium Server.

Severity

6.6 (Medium)


                        
                          CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H

CWE

CWE-178 - Improper Handling of Case Sensitivity

Assigner

Tanium CNA under the mitre root

CNA scorecard D 59/100 over 37 records in the last 180 days details

References

1 reference

URL	Tags
https://security.tanium.com/TAN-2026-054

Impacted products

1 product

Vendor	Product	Version
Tanium	Tanium Server	Affected: 7.7.3 , < 7.7.3.8351 (custom) Affected: 7.8.2 , < 7.8.2.1263 (custom) Affected: 7.8.4 , < 7.8.4.1399 (custom)

Date Public

2026-10-27 17:26

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "cna": {
      "affected": [
        {
          "product": "Tanium Server",
          "vendor": "Tanium",
          "versions": [
            {
              "lessThan": "7.7.3.8351",
              "status": "affected",
              "version": "7.7.3",
              "versionType": "custom"
            },
            {
              "lessThan": "7.8.2.1263",
              "status": "affected",
              "version": "7.8.2",
              "versionType": "custom"
            },
            {
              "lessThan": "7.8.4.1399",
              "status": "affected",
              "version": "7.8.4",
              "versionType": "custom"
            }
          ]
        }
      ],
      "dateAssigned": "2026-10-09T19:21:27.945Z",
      "datePublic": "2026-10-27T17:26:16.384Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "Tanium addressed an incorrect privilege assignment vulnerability in Tanium Server."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "baseScore": 6.6,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-178",
              "description": "Improper Handling of Case Sensitivity",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-10-27T17:35:06.612Z",
        "orgId": "3938794e-25f5-4123-a1ba-5cbd7f104512",
        "shortName": "Tanium"
      },
      "references": [
        {
          "name": "TAN-2026-054",
          "url": "https://security.tanium.com/TAN-2026-054"
        }
      ],
      "title": "Tanium addressed an incorrect privilege assignment vulnerability in Tanium Server."
    }
  },
  "cveMetadata": {
    "assignerOrgId": "3938794e-25f5-4123-a1ba-5cbd7f104512",
    "assignerShortName": "Tanium",
    "cveId": "CVE-2026-108313",
    "datePublished": "2026-10-27T17:35:06.612Z",
    "dateReserved": "2026-10-09T19:21:28.113Z",
    "dateUpdated": "2026-10-27T17:35:06.612Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-116649 (GCVE-0-2026-116649)

Vulnerability from cvelistv5 – Published: 2026-10-27 17:35 – Updated: 2026-10-27 17:35

Title

Tanium addressed an improper output sanitization vulnerability in Enforce.

Summary

Tanium addressed an improper output sanitization vulnerability in Enforce.

Severity

7.1 (High)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L

CWE

CWE-1236 - Improper Neutralization of Formula Elements in a CSV File

Assigner

Tanium CNA under the mitre root

CNA scorecard D 59/100 over 37 records in the last 180 days details

References

1 reference

URL	Tags
https://security.tanium.com/TAN-2026-072

Impacted products

1 product

Vendor	Product	Version
Tanium	Enforce	Affected: 2.9 , < 2.9.736 (custom) Affected: 2.10 , < 2.10.778 (custom) Affected: 3.0 , < 3.0.373 (custom)

Date Public

2026-10-27 17:26

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "cna": {
      "affected": [
        {
          "product": "Enforce",
          "vendor": "Tanium",
          "versions": [
            {
              "lessThan": "2.9.736",
              "status": "affected",
              "version": "2.9",
              "versionType": "custom"
            },
            {
              "lessThan": "2.10.778",
              "status": "affected",
              "version": "2.10",
              "versionType": "custom"
            },
            {
              "lessThan": "3.0.373",
              "status": "affected",
              "version": "3.0",
              "versionType": "custom"
            }
          ]
        }
      ],
      "dateAssigned": "2026-10-26T19:15:03.481Z",
      "datePublic": "2026-10-27T17:26:21.674Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "Tanium addressed an improper output sanitization vulnerability in Enforce."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "baseScore": 7.1,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L",
            "version": "3.1"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-1236",
              "description": "Improper Neutralization of Formula Elements in a CSV File",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-10-27T17:35:06.420Z",
        "orgId": "3938794e-25f5-4123-a1ba-5cbd7f104512",
        "shortName": "Tanium"
      },
      "references": [
        {
          "name": "TAN-2026-072",
          "url": "https://security.tanium.com/TAN-2026-072"
        }
      ],
      "title": "Tanium addressed an improper output sanitization vulnerability in Enforce."
    }
  },
  "cveMetadata": {
    "assignerOrgId": "3938794e-25f5-4123-a1ba-5cbd7f104512",
    "assignerShortName": "Tanium",
    "cveId": "CVE-2026-116649",
    "datePublished": "2026-10-27T17:35:06.420Z",
    "dateReserved": "2026-10-26T19:15:03.641Z",
    "dateUpdated": "2026-10-27T17:35:06.420Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-116647 (GCVE-0-2026-116647)

Vulnerability from cvelistv5 – Published: 2026-10-27 17:35 – Updated: 2026-10-27 17:35

Title

Tanium addressed an improper output sanitization vulnerability in Comply.

Summary

Tanium addressed an improper output sanitization vulnerability in Comply.

Severity

7.1 (High)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L

CWE

CWE-1236 - Improper Neutralization of Formula Elements in a CSV File

Assigner

Tanium CNA under the mitre root

CNA scorecard D 59/100 over 37 records in the last 180 days details

References

1 reference

URL	Tags
https://security.tanium.com/TAN-2026-069

Impacted products

1 product

Vendor	Product	Version
Tanium	Comply	Affected: 2.32 , < 2.32.263 (custom) Affected: 2.35 , < 2.35.323 (custom) Affected: 2.37 , < 2.37.326 (custom)

Date Public

2026-10-27 17:26

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "cna": {
      "affected": [
        {
          "product": "Comply",
          "vendor": "Tanium",
          "versions": [
            {
              "lessThan": "2.32.263",
              "status": "affected",
              "version": "2.32",
              "versionType": "custom"
            },
            {
              "lessThan": "2.35.323",
              "status": "affected",
              "version": "2.35",
              "versionType": "custom"
            },
            {
              "lessThan": "2.37.326",
              "status": "affected",
              "version": "2.37",
              "versionType": "custom"
            }
          ]
        }
      ],
      "dateAssigned": "2026-10-26T19:15:02.679Z",
      "datePublic": "2026-10-27T17:26:20.848Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "Tanium addressed an improper output sanitization vulnerability in Comply."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "baseScore": 7.1,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L",
            "version": "3.1"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-1236",
              "description": "Improper Neutralization of Formula Elements in a CSV File",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-10-27T17:35:06.241Z",
        "orgId": "3938794e-25f5-4123-a1ba-5cbd7f104512",
        "shortName": "Tanium"
      },
      "references": [
        {
          "name": "TAN-2026-069",
          "url": "https://security.tanium.com/TAN-2026-069"
        }
      ],
      "title": "Tanium addressed an improper output sanitization vulnerability in Comply."
    }
  },
  "cveMetadata": {
    "assignerOrgId": "3938794e-25f5-4123-a1ba-5cbd7f104512",
    "assignerShortName": "Tanium",
    "cveId": "CVE-2026-116647",
    "datePublished": "2026-10-27T17:35:06.241Z",
    "dateReserved": "2026-10-26T19:15:02.873Z",
    "dateUpdated": "2026-10-27T17:35:06.241Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-116660 (GCVE-0-2026-116660)

Vulnerability from cvelistv5 – Published: 2026-10-27 17:35 – Updated: 2026-10-27 17:35

Title

Tanium addressed an improper access controls vulnerability in Enforce.

Summary

Tanium addressed an improper access controls vulnerability in Enforce.

Severity

4.3 (Medium)


                        
                          CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

CWE

CWE-862 - Missing Authorization

Assigner

Tanium CNA under the mitre root

CNA scorecard D 59/100 over 37 records in the last 180 days details

References

1 reference

URL	Tags
https://security.tanium.com/TAN-2026-079

Impacted products

1 product

Vendor	Product	Version
Tanium	Enforce	Affected: 2.9 , < 2.9.736 (custom) Affected: 2.10 , < 2.10.778 (custom) Affected: 3.0 , < 3.0.373 (custom)

Date Public

2026-10-27 17:26

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "cna": {
      "affected": [
        {
          "product": "Enforce",
          "vendor": "Tanium",
          "versions": [
            {
              "lessThan": "2.9.736",
              "status": "affected",
              "version": "2.9",
              "versionType": "custom"
            },
            {
              "lessThan": "2.10.778",
              "status": "affected",
              "version": "2.10",
              "versionType": "custom"
            },
            {
              "lessThan": "3.0.373",
              "status": "affected",
              "version": "3.0",
              "versionType": "custom"
            }
          ]
        }
      ],
      "dateAssigned": "2026-10-26T19:15:07.845Z",
      "datePublic": "2026-10-27T17:26:23.885Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "Tanium addressed an improper access controls vulnerability in Enforce."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "baseScore": 4.3,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
            "version": "3.1"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-862",
              "description": "Missing Authorization",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-10-27T17:35:06.053Z",
        "orgId": "3938794e-25f5-4123-a1ba-5cbd7f104512",
        "shortName": "Tanium"
      },
      "references": [
        {
          "name": "TAN-2026-079",
          "url": "https://security.tanium.com/TAN-2026-079"
        }
      ],
      "title": "Tanium addressed an improper access controls vulnerability in Enforce."
    }
  },
  "cveMetadata": {
    "assignerOrgId": "3938794e-25f5-4123-a1ba-5cbd7f104512",
    "assignerShortName": "Tanium",
    "cveId": "CVE-2026-116660",
    "datePublished": "2026-10-27T17:35:06.053Z",
    "dateReserved": "2026-10-26T19:15:07.998Z",
    "dateUpdated": "2026-10-27T17:35:06.053Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-108326 (GCVE-0-2026-108326)

Vulnerability from cvelistv5 – Published: 2026-10-27 17:35 – Updated: 2026-10-27 17:35

Title

Tanium addressed an improper certificate validation vulnerability in Stream Client Extension.

Summary

Tanium addressed an improper certificate validation vulnerability in Stream Client Extension.

Severity

6.5 (Medium)


                        
                          CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:L

CWE

CWE-295 - Improper Certificate Validation

Assigner

Tanium CNA under the mitre root

CNA scorecard D 59/100 over 37 records in the last 180 days details

References

1 reference

URL	Tags
https://security.tanium.com/TAN-2026-060

Impacted products

2 products

Vendor	Product	Version
Tanium	Endpoint Configuration Toolset Solution	Affected: 1.51 , < 1.51.60 (custom) Affected: 1.59 , < 1.59.50 (custom) Affected: 1.71 , < 1.71.25 (custom)
Tanium	cx-stream	Affected: 2.4.1184 , < 2.4.1184 (semver) Affected: 2.7.1160 , < 2.7.1160 (semver) Affected: 2.8.1465 , < 2.8.1465 (semver) Affected: 2.9.561 , < 2.9.561 (semver)

Date Public

2026-10-27 17:26

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "cna": {
      "affected": [
        {
          "product": "Endpoint Configuration Toolset Solution",
          "vendor": "Tanium",
          "versions": [
            {
              "lessThan": "1.51.60",
              "status": "affected",
              "version": "1.51",
              "versionType": "custom"
            },
            {
              "lessThan": "1.59.50",
              "status": "affected",
              "version": "1.59",
              "versionType": "custom"
            },
            {
              "lessThan": "1.71.25",
              "status": "affected",
              "version": "1.71",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "cx-stream",
          "vendor": "Tanium",
          "versions": [
            {
              "lessThan": "2.4.1184",
              "status": "affected",
              "version": "2.4.1184",
              "versionType": "semver"
            },
            {
              "lessThan": "2.7.1160",
              "status": "affected",
              "version": "2.7.1160",
              "versionType": "semver"
            },
            {
              "lessThan": "2.8.1465",
              "status": "affected",
              "version": "2.8.1465",
              "versionType": "semver"
            },
            {
              "lessThan": "2.9.561",
              "status": "affected",
              "version": "2.9.561",
              "versionType": "semver"
            }
          ]
        }
      ],
      "dateAssigned": "2026-10-09T19:21:32.598Z",
      "datePublic": "2026-10-27T17:26:18.042Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "Tanium addressed an improper certificate validation vulnerability in Stream Client Extension."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:L",
            "version": "3.1"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-295",
              "description": "Improper Certificate Validation",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-10-27T17:35:05.870Z",
        "orgId": "3938794e-25f5-4123-a1ba-5cbd7f104512",
        "shortName": "Tanium"
      },
      "references": [
        {
          "name": "TAN-2026-060",
          "url": "https://security.tanium.com/TAN-2026-060"
        }
      ],
      "title": "Tanium addressed an improper certificate validation vulnerability in Stream Client Extension."
    }
  },
  "cveMetadata": {
    "assignerOrgId": "3938794e-25f5-4123-a1ba-5cbd7f104512",
    "assignerShortName": "Tanium",
    "cveId": "CVE-2026-108326",
    "datePublished": "2026-10-27T17:35:05.870Z",
    "dateReserved": "2026-10-09T19:21:32.766Z",
    "dateUpdated": "2026-10-27T17:35:05.870Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

Find a vulnerability

Search criteria

393366 vulnerabilities

CVE-2026-116682 (GCVE-0-2026-116682)

CVE-2026-117526 (GCVE-0-2026-117526)

CVE-2026-116680 (GCVE-0-2026-116680)

CVE-2026-88812 (GCVE-0-2026-88812)

CVE-2026-102816 (GCVE-0-2026-102816)

CVE-2026-102815 (GCVE-0-2026-102815)

CVE-2026-102814 (GCVE-0-2026-102814)

CVE-2026-102813 (GCVE-0-2026-102813)

CVE-2026-102812 (GCVE-0-2026-102812)

CVE-2026-118132 (GCVE-0-2026-118132)

CVE-2026-108311 (GCVE-0-2026-108311)

CVE-2026-108303 (GCVE-0-2026-108303)

CVE-2026-108316 (GCVE-0-2026-108316)

CVE-2026-116656 (GCVE-0-2026-116656)

CVE-2026-108325 (GCVE-0-2026-108325)

CVE-2026-116659 (GCVE-0-2026-116659)

CVE-2026-108302 (GCVE-0-2026-108302)

CVE-2026-108306 (GCVE-0-2026-108306)

CVE-2026-108329 (GCVE-0-2026-108329)

CVE-2026-108332 (GCVE-0-2026-108332)

CVE-2026-108301 (GCVE-0-2026-108301)

CVE-2026-108304 (GCVE-0-2026-108304)

CVE-2026-87086 (GCVE-0-2026-87086)

CVE-2026-108309 (GCVE-0-2026-108309)

CVE-2026-116658 (GCVE-0-2026-116658)

CVE-2026-108313 (GCVE-0-2026-108313)

CVE-2026-116649 (GCVE-0-2026-116649)

CVE-2026-116647 (GCVE-0-2026-116647)

CVE-2026-116660 (GCVE-0-2026-116660)

CVE-2026-108326 (GCVE-0-2026-108326)