Search
Find a vulnerability
Search criteria
10 vulnerabilities found for Patch by Tanium
CVE-2026-121565 (GCVE-0-2026-121565)
Vulnerability from nvd – Published: 2026-11-03 22:17 – Updated: 2026-11-06 19:26
VLAI
EPSS
VEX
Title
Tanium addressed an improper certificate validation vulnerability in multiple products
Summary
Tanium addressed an improper certificate validation vulnerability in multiple products. Products have been updated to distrust several intermediate CA certificates associated with compromised private keys.
Severity
7.4 (High)
SSVC
Exploitation: none
Automatable: no
Technical Impact: total
CISA Coordinator · CISA-ADP (v2.0.3)
Decision recorded 2026-11-06 19:26 UTC
CWE
- CWE-295 - Improper Certificate Validation
Assigner
References
1 reference
Impacted products
13 products
| Vendor | Product | Version | |
|---|---|---|---|
| Tanium | TanOS |
Affected:
1.8.5 , < 1.8.5.0326
(custom)
Affected: 1.8.6 , < 1.8.6.0193 (custom) Affected: 1.9.0 , < 1.9.0.0089 (custom) |
|
| Tanium | Asset |
Affected:
1.33 , < 1.33.334
(custom)
Affected: 1.36 , < 1.36.182 (custom) Affected: 1.39 , < 1.39.164 (custom) |
|
| Tanium | Comply |
Affected:
2.32 , < 2.32.275
(custom)
Affected: 2.35 , < 2.35.337 (custom) Affected: 2.37 , < 2.37.347 (custom) |
|
| Tanium | Connect |
Affected:
5.29 , < 5.29.272
(custom)
Affected: 5.37 , < 5.37.177 (custom) Affected: 5.47 , < 5.47.135 (custom) |
|
| Tanium | Integrity Monitor |
Affected:
3.6 , < 3.6.608
(custom)
Affected: 3.7 , < 3.7.383 (custom) Affected: 3.8 , < 3.8.362 (custom) |
|
| Tanium | Health Check |
Affected:
1.13 , < 1.13.653
(custom)
|
|
| Tanium | Endpoint Configuration Toolset Solution |
Affected:
1.51 , < 1.51.61
(custom)
Affected: 1.59 , < 1.59.51 (custom) Affected: 1.71 , < 1.71.26 (custom) |
|
| Tanium | Patch |
Affected:
3.24 , < 3.24.328
(custom)
Affected: 3.28 , < 3.28.346 (custom) Affected: 3.32 , < 3.32.383 (custom) |
|
| Tanium | Performance |
Affected:
1.25 , < 1.25.196
(custom)
|
|
| Tanium | Reputation |
Affected:
6.6 , < 6.6.150
(custom)
Affected: 6.7 , < 6.7.143 (custom) Affected: 6.8 , < 6.8.167 (custom) |
|
| Tanium | Reveal |
Affected:
2.4 , < 2.4.109
(custom)
Affected: 2.5 , < 2.5.166 (custom) |
|
| Tanium | Threat Response |
Affected:
4.9 , < 4.9.480
(custom)
Affected: 4.12 , < 4.12.353 (custom) Affected: 4.17 , < 4.17.333 (custom) |
|
| Tanium | Provision Host |
Affected:
10.4.100 , < 10.4.100
(semver)
Affected: 10.8.115 , < 10.8.115 (semver) Affected: 10.9.113 , < 10.9.113 (semver) Affected: 10.10.189 , < 10.10.189 (semver) Affected: 10.11.127 , < 10.11.127 (semver) |
Date Public
2026-11-03 22:12
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2026-121565",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "total"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-11-06T19:26:46.759376Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2026-11-06T19:26:57.322Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"product": "TanOS",
"vendor": "Tanium",
"versions": [
{
"lessThan": "1.8.5.0326",
"status": "affected",
"version": "1.8.5",
"versionType": "custom"
},
{
"lessThan": "1.8.6.0193",
"status": "affected",
"version": "1.8.6",
"versionType": "custom"
},
{
"lessThan": "1.9.0.0089",
"status": "affected",
"version": "1.9.0",
"versionType": "custom"
}
]
},
{
"product": "Asset",
"vendor": "Tanium",
"versions": [
{
"lessThan": "1.33.334",
"status": "affected",
"version": "1.33",
"versionType": "custom"
},
{
"lessThan": "1.36.182",
"status": "affected",
"version": "1.36",
"versionType": "custom"
},
{
"lessThan": "1.39.164",
"status": "affected",
"version": "1.39",
"versionType": "custom"
}
]
},
{
"product": "Comply",
"vendor": "Tanium",
"versions": [
{
"lessThan": "2.32.275",
"status": "affected",
"version": "2.32",
"versionType": "custom"
},
{
"lessThan": "2.35.337",
"status": "affected",
"version": "2.35",
"versionType": "custom"
},
{
"lessThan": "2.37.347",
"status": "affected",
"version": "2.37",
"versionType": "custom"
}
]
},
{
"product": "Connect",
"vendor": "Tanium",
"versions": [
{
"lessThan": "5.29.272",
"status": "affected",
"version": "5.29",
"versionType": "custom"
},
{
"lessThan": "5.37.177",
"status": "affected",
"version": "5.37",
"versionType": "custom"
},
{
"lessThan": "5.47.135",
"status": "affected",
"version": "5.47",
"versionType": "custom"
}
]
},
{
"product": "Integrity Monitor",
"vendor": "Tanium",
"versions": [
{
"lessThan": "3.6.608",
"status": "affected",
"version": "3.6",
"versionType": "custom"
},
{
"lessThan": "3.7.383",
"status": "affected",
"version": "3.7",
"versionType": "custom"
},
{
"lessThan": "3.8.362",
"status": "affected",
"version": "3.8",
"versionType": "custom"
}
]
},
{
"product": "Health Check",
"vendor": "Tanium",
"versions": [
{
"lessThan": "1.13.653",
"status": "affected",
"version": "1.13",
"versionType": "custom"
}
]
},
{
"product": "Endpoint Configuration Toolset Solution",
"vendor": "Tanium",
"versions": [
{
"lessThan": "1.51.61",
"status": "affected",
"version": "1.51",
"versionType": "custom"
},
{
"lessThan": "1.59.51",
"status": "affected",
"version": "1.59",
"versionType": "custom"
},
{
"lessThan": "1.71.26",
"status": "affected",
"version": "1.71",
"versionType": "custom"
}
]
},
{
"product": "Patch",
"vendor": "Tanium",
"versions": [
{
"lessThan": "3.24.328",
"status": "affected",
"version": "3.24",
"versionType": "custom"
},
{
"lessThan": "3.28.346",
"status": "affected",
"version": "3.28",
"versionType": "custom"
},
{
"lessThan": "3.32.383",
"status": "affected",
"version": "3.32",
"versionType": "custom"
}
]
},
{
"product": "Performance",
"vendor": "Tanium",
"versions": [
{
"lessThan": "1.25.196",
"status": "affected",
"version": "1.25",
"versionType": "custom"
}
]
},
{
"product": "Reputation",
"vendor": "Tanium",
"versions": [
{
"lessThan": "6.6.150",
"status": "affected",
"version": "6.6",
"versionType": "custom"
},
{
"lessThan": "6.7.143",
"status": "affected",
"version": "6.7",
"versionType": "custom"
},
{
"lessThan": "6.8.167",
"status": "affected",
"version": "6.8",
"versionType": "custom"
}
]
},
{
"product": "Reveal",
"vendor": "Tanium",
"versions": [
{
"lessThan": "2.4.109",
"status": "affected",
"version": "2.4",
"versionType": "custom"
},
{
"lessThan": "2.5.166",
"status": "affected",
"version": "2.5",
"versionType": "custom"
}
]
},
{
"product": "Threat Response",
"vendor": "Tanium",
"versions": [
{
"lessThan": "4.9.480",
"status": "affected",
"version": "4.9",
"versionType": "custom"
},
{
"lessThan": "4.12.353",
"status": "affected",
"version": "4.12",
"versionType": "custom"
},
{
"lessThan": "4.17.333",
"status": "affected",
"version": "4.17",
"versionType": "custom"
}
]
},
{
"product": "Provision Host",
"vendor": "Tanium",
"versions": [
{
"lessThan": "10.4.100",
"status": "affected",
"version": "10.4.100",
"versionType": "semver"
},
{
"lessThan": "10.8.115",
"status": "affected",
"version": "10.8.115",
"versionType": "semver"
},
{
"lessThan": "10.9.113",
"status": "affected",
"version": "10.9.113",
"versionType": "semver"
},
{
"lessThan": "10.10.189",
"status": "affected",
"version": "10.10.189",
"versionType": "semver"
},
{
"lessThan": "10.11.127",
"status": "affected",
"version": "10.11.127",
"versionType": "semver"
}
]
}
],
"dateAssigned": "2026-11-03T14:58:46.819Z",
"datePublic": "2026-11-03T22:12:11.458Z",
"descriptions": [
{
"lang": "en",
"value": "Tanium addressed an improper certificate validation vulnerability in multiple products. Products have been updated to distrust several intermediate CA certificates associated with compromised private keys."
}
],
"metrics": [
{
"cvssV3_1": {
"baseScore": 7.4,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N",
"version": "3.1"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-295",
"description": "Improper Certificate Validation",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-11-04T11:24:05.622Z",
"orgId": "3938794e-25f5-4123-a1ba-5cbd7f104512",
"shortName": "Tanium"
},
"references": [
{
"name": "TAN-2026-092",
"url": "https://security.tanium.com/TAN-2026-092"
}
],
"title": "Tanium addressed an improper certificate validation vulnerability in multiple products"
}
},
"cveMetadata": {
"assignerOrgId": "3938794e-25f5-4123-a1ba-5cbd7f104512",
"assignerShortName": "Tanium",
"cveId": "CVE-2026-121565",
"datePublished": "2026-11-03T22:17:22.997Z",
"dateReserved": "2026-11-03T14:58:47.328Z",
"dateUpdated": "2026-11-06T19:26:57.322Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-108308 (GCVE-0-2026-108308)
Vulnerability from nvd – Published: 2026-10-27 17:30 – Updated: 2026-11-04 17:02
VLAI
EPSS
VEX
Title
Tanium addressed a SQL injection vulnerability in Patch.
Summary
Tanium addressed a SQL injection vulnerability in Patch.
Severity
6.5 (Medium)
SSVC
Exploitation: none
Automatable: no
Technical Impact: partial
CISA Coordinator · CISA-ADP (v2.0.3)
Decision recorded 2026-11-04 17:02 UTC
CWE
- CWE-89 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
Assigner
References
1 reference
Impacted products
Date Public
2026-10-27 17:26
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2026-108308",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-11-04T17:02:45.570415Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2026-11-04T17:02:58.749Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"product": "Patch",
"vendor": "Tanium",
"versions": [
{
"lessThan": "3.24.306",
"status": "affected",
"version": "3.24",
"versionType": "custom"
},
{
"lessThan": "3.28.325",
"status": "affected",
"version": "3.28",
"versionType": "custom"
},
{
"lessThan": "3.32.353",
"status": "affected",
"version": "3.32",
"versionType": "custom"
}
]
}
],
"dateAssigned": "2026-10-09T19:21:26.199Z",
"datePublic": "2026-10-27T17:26:16.092Z",
"descriptions": [
{
"lang": "en",
"value": "Tanium addressed a SQL injection vulnerability in Patch."
}
],
"metrics": [
{
"cvssV3_1": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
"version": "3.1"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-89",
"description": "Improper Neutralization of Special Elements used in an SQL Command (\u0027SQL Injection\u0027)",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-10-27T17:30:53.396Z",
"orgId": "3938794e-25f5-4123-a1ba-5cbd7f104512",
"shortName": "Tanium"
},
"references": [
{
"name": "TAN-2026-053",
"url": "https://security.tanium.com/TAN-2026-053"
}
],
"title": "Tanium addressed a SQL injection vulnerability in Patch."
}
},
"cveMetadata": {
"assignerOrgId": "3938794e-25f5-4123-a1ba-5cbd7f104512",
"assignerShortName": "Tanium",
"cveId": "CVE-2026-108308",
"datePublished": "2026-10-27T17:30:53.396Z",
"dateReserved": "2026-10-09T19:21:26.384Z",
"dateUpdated": "2026-11-04T17:02:58.749Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-11391 (GCVE-0-2026-11391)
Vulnerability from nvd – Published: 2026-07-28 18:58 – Updated: 2026-07-28 19:36
VLAI
EPSS
VEX
Title
Tanium addressed a SQL injection vulnerability in Patch.
Summary
Tanium addressed a SQL injection vulnerability in Patch.
Severity
6.3 (Medium)
SSVC
Exploitation: none
Automatable: no
Technical Impact: partial
CISA Coordinator · CISA-ADP (v2.0.3)
Decision recorded 2026-07-28 19:36 UTC
CWE
- CWE-89 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
Assigner
References
1 reference
Impacted products
Date Public
2026-07-28 18:57
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2026-11391",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-07-28T19:36:20.856163Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2026-07-28T19:36:27.465Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"product": "Patch",
"vendor": "Tanium",
"versions": [
{
"lessThan": "3.24.235",
"status": "affected",
"version": "3.24.0",
"versionType": "custom"
},
{
"lessThan": "3.28.232",
"status": "affected",
"version": "3.28.0",
"versionType": "custom"
},
{
"lessThan": "3.32.258",
"status": "affected",
"version": "3.32.0",
"versionType": "custom"
}
]
}
],
"dateAssigned": "2026-06-05T16:03:56.017Z",
"datePublic": "2026-07-28T18:57:53.357Z",
"descriptions": [
{
"lang": "en",
"value": "Tanium addressed a SQL injection vulnerability in Patch."
}
],
"metrics": [
{
"cvssV3_1": {
"baseScore": 6.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
"version": "3.1"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-89",
"description": "Improper Neutralization of Special Elements used in an SQL Command (\u0027SQL Injection\u0027)",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-07-28T19:16:38.053Z",
"orgId": "3938794e-25f5-4123-a1ba-5cbd7f104512",
"shortName": "Tanium"
},
"references": [
{
"name": "TAN-2026-019",
"url": "https://security.tanium.com/TAN-2026-019"
}
],
"title": "Tanium addressed a SQL injection vulnerability in Patch."
}
},
"cveMetadata": {
"assignerOrgId": "3938794e-25f5-4123-a1ba-5cbd7f104512",
"assignerShortName": "Tanium",
"cveId": "CVE-2026-11391",
"datePublished": "2026-07-28T18:58:06.313Z",
"dateReserved": "2026-06-05T16:03:56.942Z",
"dateUpdated": "2026-07-28T19:36:27.465Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2025-15337 (GCVE-0-2025-15337)
Vulnerability from nvd – Published: 2026-02-05 18:16 – Updated: 2026-02-06 19:19
VLAI
EPSS
VEX
Title
Tanium addressed an incorrect default permissions vulnerability in Patch.
Summary
Tanium addressed an incorrect default permissions vulnerability in Patch.
Severity
6.5 (Medium)
SSVC
Exploitation: none
Automatable: no
Technical Impact: total
CISA Coordinator · CISA-ADP (v2.0.3)
Decision recorded 2026-02-06 19:18 UTC
CWE
- CWE-276 - Incorrect Default Permissions
Assigner
References
1 reference
Impacted products
1 product
| Vendor | Product | Version | |
|---|---|---|---|
| Tanium | Patch |
Affected:
3.17.0 , < 3.17.2300
(custom)
Affected: 3.19.0 , < 3.19.232 (custom) Affected: 3.24.0 , < 3.24.137 (custom) cpe:2.3:a:tanium:service_patch:3.17.2299:*:*:*:*:*:*:* cpe:2.3:a:tanium:service_patch:3.19.231:*:*:*:*:*:*:* cpe:2.3:a:tanium:service_patch:3.24.136:*:*:*:*:*:*:* |
Date Public
2025-09-16 00:00
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2025-15337",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "total"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-02-06T19:18:55.436355Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2026-02-06T19:19:06.782Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"cpes": [
"cpe:2.3:a:tanium:service_patch:3.17.2299:*:*:*:*:*:*:*",
"cpe:2.3:a:tanium:service_patch:3.19.231:*:*:*:*:*:*:*",
"cpe:2.3:a:tanium:service_patch:3.24.136:*:*:*:*:*:*:*"
],
"product": "Patch",
"vendor": "Tanium",
"versions": [
{
"lessThan": "3.17.2300",
"status": "affected",
"version": "3.17.0",
"versionType": "custom"
},
{
"lessThan": "3.19.232",
"status": "affected",
"version": "3.19.0",
"versionType": "custom"
},
{
"lessThan": "3.24.137",
"status": "affected",
"version": "3.24.0",
"versionType": "custom"
}
]
}
],
"dateAssigned": "2025-12-29T23:13:48.304Z",
"datePublic": "2025-09-16T00:00:00.000Z",
"descriptions": [
{
"lang": "en",
"value": "Tanium addressed an incorrect default permissions vulnerability in Patch."
}
],
"metrics": [
{
"cvssV3_1": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N",
"version": "3.1"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-276",
"description": "Incorrect Default Permissions",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-02-05T18:16:28.498Z",
"orgId": "3938794e-25f5-4123-a1ba-5cbd7f104512",
"shortName": "Tanium"
},
"references": [
{
"name": "TAN-2025-029",
"url": "https://security.tanium.com/TAN-2025-029"
}
],
"title": "Tanium addressed an incorrect default permissions vulnerability in Patch."
}
},
"cveMetadata": {
"assignerOrgId": "3938794e-25f5-4123-a1ba-5cbd7f104512",
"assignerShortName": "Tanium",
"cveId": "CVE-2025-15337",
"datePublished": "2026-02-05T18:16:28.498Z",
"dateReserved": "2025-12-29T23:13:48.471Z",
"dateUpdated": "2026-02-06T19:19:06.782Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2025-15326 (GCVE-0-2025-15326)
Vulnerability from nvd – Published: 2026-02-05 18:25 – Updated: 2026-02-06 19:07
VLAI
EPSS
VEX
Title
Tanium addressed an improper access controls vulnerability in Patch.
Summary
Tanium addressed an improper access controls vulnerability in Patch.
Severity
4.3 (Medium)
SSVC
Exploitation: none
Automatable: no
Technical Impact: partial
CISA Coordinator · CISA-ADP (v2.0.3)
Decision recorded 2026-02-06 19:07 UTC
CWE
- CWE-862 - Missing Authorization
Assigner
References
1 reference
Impacted products
Date Public
2025-01-22 00:00
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2025-15326",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-02-06T19:07:15.349117Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2026-02-06T19:07:24.033Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"cpes": [
"cpe:2.3:a:tanium:service_patch:3.17.2261:*:*:*:*:*:*:*",
"cpe:2.3:a:tanium:service_patch:3.19.194:*:*:*:*:*:*:*"
],
"product": "Patch",
"vendor": "Tanium",
"versions": [
{
"lessThan": "3.17.2262",
"status": "affected",
"version": "3.17.0",
"versionType": "custom"
},
{
"lessThan": "3.19.195",
"status": "affected",
"version": "3.19.0",
"versionType": "custom"
}
]
}
],
"dateAssigned": "2025-12-29T23:13:29.639Z",
"datePublic": "2025-01-22T00:00:00.000Z",
"descriptions": [
{
"lang": "en",
"value": "Tanium addressed an improper access controls vulnerability in Patch."
}
],
"metrics": [
{
"cvssV3_1": {
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
"version": "3.1"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-862",
"description": "Missing Authorization",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-02-05T18:25:11.487Z",
"orgId": "3938794e-25f5-4123-a1ba-5cbd7f104512",
"shortName": "Tanium"
},
"references": [
{
"name": "TAN-2025-006",
"url": "https://security.tanium.com/TAN-2025-006"
}
],
"title": "Tanium addressed an improper access controls vulnerability in Patch."
}
},
"cveMetadata": {
"assignerOrgId": "3938794e-25f5-4123-a1ba-5cbd7f104512",
"assignerShortName": "Tanium",
"cveId": "CVE-2025-15326",
"datePublished": "2026-02-05T18:25:11.487Z",
"dateReserved": "2025-12-29T23:13:29.803Z",
"dateUpdated": "2026-02-06T19:07:24.033Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-121565 (GCVE-0-2026-121565)
Vulnerability from cvelistv5 – Published: 2026-11-03 22:17 – Updated: 2026-11-06 19:26
VLAI
EPSS
VEX
Title
Tanium addressed an improper certificate validation vulnerability in multiple products
Summary
Tanium addressed an improper certificate validation vulnerability in multiple products. Products have been updated to distrust several intermediate CA certificates associated with compromised private keys.
Severity
7.4 (High)
SSVC
Exploitation: none
Automatable: no
Technical Impact: total
CISA Coordinator · CISA-ADP (v2.0.3)
Decision recorded 2026-11-06 19:26 UTC
CWE
- CWE-295 - Improper Certificate Validation
Assigner
References
1 reference
Impacted products
13 products
| Vendor | Product | Version | |
|---|---|---|---|
| Tanium | TanOS |
Affected:
1.8.5 , < 1.8.5.0326
(custom)
Affected: 1.8.6 , < 1.8.6.0193 (custom) Affected: 1.9.0 , < 1.9.0.0089 (custom) |
|
| Tanium | Asset |
Affected:
1.33 , < 1.33.334
(custom)
Affected: 1.36 , < 1.36.182 (custom) Affected: 1.39 , < 1.39.164 (custom) |
|
| Tanium | Comply |
Affected:
2.32 , < 2.32.275
(custom)
Affected: 2.35 , < 2.35.337 (custom) Affected: 2.37 , < 2.37.347 (custom) |
|
| Tanium | Connect |
Affected:
5.29 , < 5.29.272
(custom)
Affected: 5.37 , < 5.37.177 (custom) Affected: 5.47 , < 5.47.135 (custom) |
|
| Tanium | Integrity Monitor |
Affected:
3.6 , < 3.6.608
(custom)
Affected: 3.7 , < 3.7.383 (custom) Affected: 3.8 , < 3.8.362 (custom) |
|
| Tanium | Health Check |
Affected:
1.13 , < 1.13.653
(custom)
|
|
| Tanium | Endpoint Configuration Toolset Solution |
Affected:
1.51 , < 1.51.61
(custom)
Affected: 1.59 , < 1.59.51 (custom) Affected: 1.71 , < 1.71.26 (custom) |
|
| Tanium | Patch |
Affected:
3.24 , < 3.24.328
(custom)
Affected: 3.28 , < 3.28.346 (custom) Affected: 3.32 , < 3.32.383 (custom) |
|
| Tanium | Performance |
Affected:
1.25 , < 1.25.196
(custom)
|
|
| Tanium | Reputation |
Affected:
6.6 , < 6.6.150
(custom)
Affected: 6.7 , < 6.7.143 (custom) Affected: 6.8 , < 6.8.167 (custom) |
|
| Tanium | Reveal |
Affected:
2.4 , < 2.4.109
(custom)
Affected: 2.5 , < 2.5.166 (custom) |
|
| Tanium | Threat Response |
Affected:
4.9 , < 4.9.480
(custom)
Affected: 4.12 , < 4.12.353 (custom) Affected: 4.17 , < 4.17.333 (custom) |
|
| Tanium | Provision Host |
Affected:
10.4.100 , < 10.4.100
(semver)
Affected: 10.8.115 , < 10.8.115 (semver) Affected: 10.9.113 , < 10.9.113 (semver) Affected: 10.10.189 , < 10.10.189 (semver) Affected: 10.11.127 , < 10.11.127 (semver) |
Date Public
2026-11-03 22:12
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2026-121565",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "total"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-11-06T19:26:46.759376Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2026-11-06T19:26:57.322Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"product": "TanOS",
"vendor": "Tanium",
"versions": [
{
"lessThan": "1.8.5.0326",
"status": "affected",
"version": "1.8.5",
"versionType": "custom"
},
{
"lessThan": "1.8.6.0193",
"status": "affected",
"version": "1.8.6",
"versionType": "custom"
},
{
"lessThan": "1.9.0.0089",
"status": "affected",
"version": "1.9.0",
"versionType": "custom"
}
]
},
{
"product": "Asset",
"vendor": "Tanium",
"versions": [
{
"lessThan": "1.33.334",
"status": "affected",
"version": "1.33",
"versionType": "custom"
},
{
"lessThan": "1.36.182",
"status": "affected",
"version": "1.36",
"versionType": "custom"
},
{
"lessThan": "1.39.164",
"status": "affected",
"version": "1.39",
"versionType": "custom"
}
]
},
{
"product": "Comply",
"vendor": "Tanium",
"versions": [
{
"lessThan": "2.32.275",
"status": "affected",
"version": "2.32",
"versionType": "custom"
},
{
"lessThan": "2.35.337",
"status": "affected",
"version": "2.35",
"versionType": "custom"
},
{
"lessThan": "2.37.347",
"status": "affected",
"version": "2.37",
"versionType": "custom"
}
]
},
{
"product": "Connect",
"vendor": "Tanium",
"versions": [
{
"lessThan": "5.29.272",
"status": "affected",
"version": "5.29",
"versionType": "custom"
},
{
"lessThan": "5.37.177",
"status": "affected",
"version": "5.37",
"versionType": "custom"
},
{
"lessThan": "5.47.135",
"status": "affected",
"version": "5.47",
"versionType": "custom"
}
]
},
{
"product": "Integrity Monitor",
"vendor": "Tanium",
"versions": [
{
"lessThan": "3.6.608",
"status": "affected",
"version": "3.6",
"versionType": "custom"
},
{
"lessThan": "3.7.383",
"status": "affected",
"version": "3.7",
"versionType": "custom"
},
{
"lessThan": "3.8.362",
"status": "affected",
"version": "3.8",
"versionType": "custom"
}
]
},
{
"product": "Health Check",
"vendor": "Tanium",
"versions": [
{
"lessThan": "1.13.653",
"status": "affected",
"version": "1.13",
"versionType": "custom"
}
]
},
{
"product": "Endpoint Configuration Toolset Solution",
"vendor": "Tanium",
"versions": [
{
"lessThan": "1.51.61",
"status": "affected",
"version": "1.51",
"versionType": "custom"
},
{
"lessThan": "1.59.51",
"status": "affected",
"version": "1.59",
"versionType": "custom"
},
{
"lessThan": "1.71.26",
"status": "affected",
"version": "1.71",
"versionType": "custom"
}
]
},
{
"product": "Patch",
"vendor": "Tanium",
"versions": [
{
"lessThan": "3.24.328",
"status": "affected",
"version": "3.24",
"versionType": "custom"
},
{
"lessThan": "3.28.346",
"status": "affected",
"version": "3.28",
"versionType": "custom"
},
{
"lessThan": "3.32.383",
"status": "affected",
"version": "3.32",
"versionType": "custom"
}
]
},
{
"product": "Performance",
"vendor": "Tanium",
"versions": [
{
"lessThan": "1.25.196",
"status": "affected",
"version": "1.25",
"versionType": "custom"
}
]
},
{
"product": "Reputation",
"vendor": "Tanium",
"versions": [
{
"lessThan": "6.6.150",
"status": "affected",
"version": "6.6",
"versionType": "custom"
},
{
"lessThan": "6.7.143",
"status": "affected",
"version": "6.7",
"versionType": "custom"
},
{
"lessThan": "6.8.167",
"status": "affected",
"version": "6.8",
"versionType": "custom"
}
]
},
{
"product": "Reveal",
"vendor": "Tanium",
"versions": [
{
"lessThan": "2.4.109",
"status": "affected",
"version": "2.4",
"versionType": "custom"
},
{
"lessThan": "2.5.166",
"status": "affected",
"version": "2.5",
"versionType": "custom"
}
]
},
{
"product": "Threat Response",
"vendor": "Tanium",
"versions": [
{
"lessThan": "4.9.480",
"status": "affected",
"version": "4.9",
"versionType": "custom"
},
{
"lessThan": "4.12.353",
"status": "affected",
"version": "4.12",
"versionType": "custom"
},
{
"lessThan": "4.17.333",
"status": "affected",
"version": "4.17",
"versionType": "custom"
}
]
},
{
"product": "Provision Host",
"vendor": "Tanium",
"versions": [
{
"lessThan": "10.4.100",
"status": "affected",
"version": "10.4.100",
"versionType": "semver"
},
{
"lessThan": "10.8.115",
"status": "affected",
"version": "10.8.115",
"versionType": "semver"
},
{
"lessThan": "10.9.113",
"status": "affected",
"version": "10.9.113",
"versionType": "semver"
},
{
"lessThan": "10.10.189",
"status": "affected",
"version": "10.10.189",
"versionType": "semver"
},
{
"lessThan": "10.11.127",
"status": "affected",
"version": "10.11.127",
"versionType": "semver"
}
]
}
],
"dateAssigned": "2026-11-03T14:58:46.819Z",
"datePublic": "2026-11-03T22:12:11.458Z",
"descriptions": [
{
"lang": "en",
"value": "Tanium addressed an improper certificate validation vulnerability in multiple products. Products have been updated to distrust several intermediate CA certificates associated with compromised private keys."
}
],
"metrics": [
{
"cvssV3_1": {
"baseScore": 7.4,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N",
"version": "3.1"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-295",
"description": "Improper Certificate Validation",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-11-04T11:24:05.622Z",
"orgId": "3938794e-25f5-4123-a1ba-5cbd7f104512",
"shortName": "Tanium"
},
"references": [
{
"name": "TAN-2026-092",
"url": "https://security.tanium.com/TAN-2026-092"
}
],
"title": "Tanium addressed an improper certificate validation vulnerability in multiple products"
}
},
"cveMetadata": {
"assignerOrgId": "3938794e-25f5-4123-a1ba-5cbd7f104512",
"assignerShortName": "Tanium",
"cveId": "CVE-2026-121565",
"datePublished": "2026-11-03T22:17:22.997Z",
"dateReserved": "2026-11-03T14:58:47.328Z",
"dateUpdated": "2026-11-06T19:26:57.322Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-108308 (GCVE-0-2026-108308)
Vulnerability from cvelistv5 – Published: 2026-10-27 17:30 – Updated: 2026-11-04 17:02
VLAI
EPSS
VEX
Title
Tanium addressed a SQL injection vulnerability in Patch.
Summary
Tanium addressed a SQL injection vulnerability in Patch.
Severity
6.5 (Medium)
SSVC
Exploitation: none
Automatable: no
Technical Impact: partial
CISA Coordinator · CISA-ADP (v2.0.3)
Decision recorded 2026-11-04 17:02 UTC
CWE
- CWE-89 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
Assigner
References
1 reference
Impacted products
Date Public
2026-10-27 17:26
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2026-108308",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-11-04T17:02:45.570415Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2026-11-04T17:02:58.749Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"product": "Patch",
"vendor": "Tanium",
"versions": [
{
"lessThan": "3.24.306",
"status": "affected",
"version": "3.24",
"versionType": "custom"
},
{
"lessThan": "3.28.325",
"status": "affected",
"version": "3.28",
"versionType": "custom"
},
{
"lessThan": "3.32.353",
"status": "affected",
"version": "3.32",
"versionType": "custom"
}
]
}
],
"dateAssigned": "2026-10-09T19:21:26.199Z",
"datePublic": "2026-10-27T17:26:16.092Z",
"descriptions": [
{
"lang": "en",
"value": "Tanium addressed a SQL injection vulnerability in Patch."
}
],
"metrics": [
{
"cvssV3_1": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
"version": "3.1"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-89",
"description": "Improper Neutralization of Special Elements used in an SQL Command (\u0027SQL Injection\u0027)",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-10-27T17:30:53.396Z",
"orgId": "3938794e-25f5-4123-a1ba-5cbd7f104512",
"shortName": "Tanium"
},
"references": [
{
"name": "TAN-2026-053",
"url": "https://security.tanium.com/TAN-2026-053"
}
],
"title": "Tanium addressed a SQL injection vulnerability in Patch."
}
},
"cveMetadata": {
"assignerOrgId": "3938794e-25f5-4123-a1ba-5cbd7f104512",
"assignerShortName": "Tanium",
"cveId": "CVE-2026-108308",
"datePublished": "2026-10-27T17:30:53.396Z",
"dateReserved": "2026-10-09T19:21:26.384Z",
"dateUpdated": "2026-11-04T17:02:58.749Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-11391 (GCVE-0-2026-11391)
Vulnerability from cvelistv5 – Published: 2026-07-28 18:58 – Updated: 2026-07-28 19:36
VLAI
EPSS
VEX
Title
Tanium addressed a SQL injection vulnerability in Patch.
Summary
Tanium addressed a SQL injection vulnerability in Patch.
Severity
6.3 (Medium)
SSVC
Exploitation: none
Automatable: no
Technical Impact: partial
CISA Coordinator · CISA-ADP (v2.0.3)
Decision recorded 2026-07-28 19:36 UTC
CWE
- CWE-89 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
Assigner
References
1 reference
Impacted products
Date Public
2026-07-28 18:57
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2026-11391",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-07-28T19:36:20.856163Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2026-07-28T19:36:27.465Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"product": "Patch",
"vendor": "Tanium",
"versions": [
{
"lessThan": "3.24.235",
"status": "affected",
"version": "3.24.0",
"versionType": "custom"
},
{
"lessThan": "3.28.232",
"status": "affected",
"version": "3.28.0",
"versionType": "custom"
},
{
"lessThan": "3.32.258",
"status": "affected",
"version": "3.32.0",
"versionType": "custom"
}
]
}
],
"dateAssigned": "2026-06-05T16:03:56.017Z",
"datePublic": "2026-07-28T18:57:53.357Z",
"descriptions": [
{
"lang": "en",
"value": "Tanium addressed a SQL injection vulnerability in Patch."
}
],
"metrics": [
{
"cvssV3_1": {
"baseScore": 6.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
"version": "3.1"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-89",
"description": "Improper Neutralization of Special Elements used in an SQL Command (\u0027SQL Injection\u0027)",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-07-28T19:16:38.053Z",
"orgId": "3938794e-25f5-4123-a1ba-5cbd7f104512",
"shortName": "Tanium"
},
"references": [
{
"name": "TAN-2026-019",
"url": "https://security.tanium.com/TAN-2026-019"
}
],
"title": "Tanium addressed a SQL injection vulnerability in Patch."
}
},
"cveMetadata": {
"assignerOrgId": "3938794e-25f5-4123-a1ba-5cbd7f104512",
"assignerShortName": "Tanium",
"cveId": "CVE-2026-11391",
"datePublished": "2026-07-28T18:58:06.313Z",
"dateReserved": "2026-06-05T16:03:56.942Z",
"dateUpdated": "2026-07-28T19:36:27.465Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2025-15326 (GCVE-0-2025-15326)
Vulnerability from cvelistv5 – Published: 2026-02-05 18:25 – Updated: 2026-02-06 19:07
VLAI
EPSS
VEX
Title
Tanium addressed an improper access controls vulnerability in Patch.
Summary
Tanium addressed an improper access controls vulnerability in Patch.
Severity
4.3 (Medium)
SSVC
Exploitation: none
Automatable: no
Technical Impact: partial
CISA Coordinator · CISA-ADP (v2.0.3)
Decision recorded 2026-02-06 19:07 UTC
CWE
- CWE-862 - Missing Authorization
Assigner
References
1 reference
Impacted products
Date Public
2025-01-22 00:00
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2025-15326",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-02-06T19:07:15.349117Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2026-02-06T19:07:24.033Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"cpes": [
"cpe:2.3:a:tanium:service_patch:3.17.2261:*:*:*:*:*:*:*",
"cpe:2.3:a:tanium:service_patch:3.19.194:*:*:*:*:*:*:*"
],
"product": "Patch",
"vendor": "Tanium",
"versions": [
{
"lessThan": "3.17.2262",
"status": "affected",
"version": "3.17.0",
"versionType": "custom"
},
{
"lessThan": "3.19.195",
"status": "affected",
"version": "3.19.0",
"versionType": "custom"
}
]
}
],
"dateAssigned": "2025-12-29T23:13:29.639Z",
"datePublic": "2025-01-22T00:00:00.000Z",
"descriptions": [
{
"lang": "en",
"value": "Tanium addressed an improper access controls vulnerability in Patch."
}
],
"metrics": [
{
"cvssV3_1": {
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
"version": "3.1"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-862",
"description": "Missing Authorization",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-02-05T18:25:11.487Z",
"orgId": "3938794e-25f5-4123-a1ba-5cbd7f104512",
"shortName": "Tanium"
},
"references": [
{
"name": "TAN-2025-006",
"url": "https://security.tanium.com/TAN-2025-006"
}
],
"title": "Tanium addressed an improper access controls vulnerability in Patch."
}
},
"cveMetadata": {
"assignerOrgId": "3938794e-25f5-4123-a1ba-5cbd7f104512",
"assignerShortName": "Tanium",
"cveId": "CVE-2025-15326",
"datePublished": "2026-02-05T18:25:11.487Z",
"dateReserved": "2025-12-29T23:13:29.803Z",
"dateUpdated": "2026-02-06T19:07:24.033Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2025-15337 (GCVE-0-2025-15337)
Vulnerability from cvelistv5 – Published: 2026-02-05 18:16 – Updated: 2026-02-06 19:19
VLAI
EPSS
VEX
Title
Tanium addressed an incorrect default permissions vulnerability in Patch.
Summary
Tanium addressed an incorrect default permissions vulnerability in Patch.
Severity
6.5 (Medium)
SSVC
Exploitation: none
Automatable: no
Technical Impact: total
CISA Coordinator · CISA-ADP (v2.0.3)
Decision recorded 2026-02-06 19:18 UTC
CWE
- CWE-276 - Incorrect Default Permissions
Assigner
References
1 reference
Impacted products
1 product
| Vendor | Product | Version | |
|---|---|---|---|
| Tanium | Patch |
Affected:
3.17.0 , < 3.17.2300
(custom)
Affected: 3.19.0 , < 3.19.232 (custom) Affected: 3.24.0 , < 3.24.137 (custom) cpe:2.3:a:tanium:service_patch:3.17.2299:*:*:*:*:*:*:* cpe:2.3:a:tanium:service_patch:3.19.231:*:*:*:*:*:*:* cpe:2.3:a:tanium:service_patch:3.24.136:*:*:*:*:*:*:* |
Date Public
2025-09-16 00:00
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2025-15337",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "total"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-02-06T19:18:55.436355Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2026-02-06T19:19:06.782Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"cpes": [
"cpe:2.3:a:tanium:service_patch:3.17.2299:*:*:*:*:*:*:*",
"cpe:2.3:a:tanium:service_patch:3.19.231:*:*:*:*:*:*:*",
"cpe:2.3:a:tanium:service_patch:3.24.136:*:*:*:*:*:*:*"
],
"product": "Patch",
"vendor": "Tanium",
"versions": [
{
"lessThan": "3.17.2300",
"status": "affected",
"version": "3.17.0",
"versionType": "custom"
},
{
"lessThan": "3.19.232",
"status": "affected",
"version": "3.19.0",
"versionType": "custom"
},
{
"lessThan": "3.24.137",
"status": "affected",
"version": "3.24.0",
"versionType": "custom"
}
]
}
],
"dateAssigned": "2025-12-29T23:13:48.304Z",
"datePublic": "2025-09-16T00:00:00.000Z",
"descriptions": [
{
"lang": "en",
"value": "Tanium addressed an incorrect default permissions vulnerability in Patch."
}
],
"metrics": [
{
"cvssV3_1": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N",
"version": "3.1"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-276",
"description": "Incorrect Default Permissions",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-02-05T18:16:28.498Z",
"orgId": "3938794e-25f5-4123-a1ba-5cbd7f104512",
"shortName": "Tanium"
},
"references": [
{
"name": "TAN-2025-029",
"url": "https://security.tanium.com/TAN-2025-029"
}
],
"title": "Tanium addressed an incorrect default permissions vulnerability in Patch."
}
},
"cveMetadata": {
"assignerOrgId": "3938794e-25f5-4123-a1ba-5cbd7f104512",
"assignerShortName": "Tanium",
"cveId": "CVE-2025-15337",
"datePublished": "2026-02-05T18:16:28.498Z",
"dateReserved": "2025-12-29T23:13:48.471Z",
"dateUpdated": "2026-02-06T19:19:06.782Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}