Find a vulnerability

Search criteria

Vendor

Product

Assigner (CNA or root)

Sources

Sort by

Order

CVSS min

CVSS max

Apply ordering (override relevance)

2 vulnerabilities found for Provision Host by Tanium

CVE-2026-121565 (GCVE-0-2026-121565)

Vulnerability from nvd – Published: 2026-11-03 22:17 – Updated: 2026-11-06 19:26

Title

Tanium addressed an improper certificate validation vulnerability in multiple products

Summary

Tanium addressed an improper certificate validation vulnerability in multiple products. Products have been updated to distrust several intermediate CA certificates associated with compromised private keys.

Severity

7.4 (High)


                        
                          CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N

SSVC

Exploitation: none Automatable: no Technical Impact: total

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2026-11-06 19:26 UTC

CWE

CWE-295 - Improper Certificate Validation

Assigner

Tanium CNA under the mitre root

CNA scorecard D 60/100 over 87 records in the last 180 days details

References

1 reference

URL	Tags
https://security.tanium.com/TAN-2026-092

Impacted products

13 products

Vendor	Product	Version
Tanium	TanOS	Affected: 1.8.5 , < 1.8.5.0326 (custom) Affected: 1.8.6 , < 1.8.6.0193 (custom) Affected: 1.9.0 , < 1.9.0.0089 (custom)
Tanium	Asset	Affected: 1.33 , < 1.33.334 (custom) Affected: 1.36 , < 1.36.182 (custom) Affected: 1.39 , < 1.39.164 (custom)
Tanium	Comply	Affected: 2.32 , < 2.32.275 (custom) Affected: 2.35 , < 2.35.337 (custom) Affected: 2.37 , < 2.37.347 (custom)
Tanium	Connect	Affected: 5.29 , < 5.29.272 (custom) Affected: 5.37 , < 5.37.177 (custom) Affected: 5.47 , < 5.47.135 (custom)
Tanium	Integrity Monitor	Affected: 3.6 , < 3.6.608 (custom) Affected: 3.7 , < 3.7.383 (custom) Affected: 3.8 , < 3.8.362 (custom)
Tanium	Health Check	Affected: 1.13 , < 1.13.653 (custom)
Tanium	Endpoint Configuration Toolset Solution	Affected: 1.51 , < 1.51.61 (custom) Affected: 1.59 , < 1.59.51 (custom) Affected: 1.71 , < 1.71.26 (custom)
Tanium	Patch	Affected: 3.24 , < 3.24.328 (custom) Affected: 3.28 , < 3.28.346 (custom) Affected: 3.32 , < 3.32.383 (custom)
Tanium	Performance	Affected: 1.25 , < 1.25.196 (custom)
Tanium	Reputation	Affected: 6.6 , < 6.6.150 (custom) Affected: 6.7 , < 6.7.143 (custom) Affected: 6.8 , < 6.8.167 (custom)
Tanium	Reveal	Affected: 2.4 , < 2.4.109 (custom) Affected: 2.5 , < 2.5.166 (custom)
Tanium	Threat Response	Affected: 4.9 , < 4.9.480 (custom) Affected: 4.12 , < 4.12.353 (custom) Affected: 4.17 , < 4.17.333 (custom)
Tanium	Provision Host	Affected: 10.4.100 , < 10.4.100 (semver) Affected: 10.8.115 , < 10.8.115 (semver) Affected: 10.9.113 , < 10.9.113 (semver) Affected: 10.10.189 , < 10.10.189 (semver) Affected: 10.11.127 , < 10.11.127 (semver)

Date Public

2026-11-03 22:12

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-121565",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-11-06T19:26:46.759376Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-11-06T19:26:57.322Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "TanOS",
          "vendor": "Tanium",
          "versions": [
            {
              "lessThan": "1.8.5.0326",
              "status": "affected",
              "version": "1.8.5",
              "versionType": "custom"
            },
            {
              "lessThan": "1.8.6.0193",
              "status": "affected",
              "version": "1.8.6",
              "versionType": "custom"
            },
            {
              "lessThan": "1.9.0.0089",
              "status": "affected",
              "version": "1.9.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "Asset",
          "vendor": "Tanium",
          "versions": [
            {
              "lessThan": "1.33.334",
              "status": "affected",
              "version": "1.33",
              "versionType": "custom"
            },
            {
              "lessThan": "1.36.182",
              "status": "affected",
              "version": "1.36",
              "versionType": "custom"
            },
            {
              "lessThan": "1.39.164",
              "status": "affected",
              "version": "1.39",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "Comply",
          "vendor": "Tanium",
          "versions": [
            {
              "lessThan": "2.32.275",
              "status": "affected",
              "version": "2.32",
              "versionType": "custom"
            },
            {
              "lessThan": "2.35.337",
              "status": "affected",
              "version": "2.35",
              "versionType": "custom"
            },
            {
              "lessThan": "2.37.347",
              "status": "affected",
              "version": "2.37",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "Connect",
          "vendor": "Tanium",
          "versions": [
            {
              "lessThan": "5.29.272",
              "status": "affected",
              "version": "5.29",
              "versionType": "custom"
            },
            {
              "lessThan": "5.37.177",
              "status": "affected",
              "version": "5.37",
              "versionType": "custom"
            },
            {
              "lessThan": "5.47.135",
              "status": "affected",
              "version": "5.47",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "Integrity Monitor",
          "vendor": "Tanium",
          "versions": [
            {
              "lessThan": "3.6.608",
              "status": "affected",
              "version": "3.6",
              "versionType": "custom"
            },
            {
              "lessThan": "3.7.383",
              "status": "affected",
              "version": "3.7",
              "versionType": "custom"
            },
            {
              "lessThan": "3.8.362",
              "status": "affected",
              "version": "3.8",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "Health Check",
          "vendor": "Tanium",
          "versions": [
            {
              "lessThan": "1.13.653",
              "status": "affected",
              "version": "1.13",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "Endpoint Configuration Toolset Solution",
          "vendor": "Tanium",
          "versions": [
            {
              "lessThan": "1.51.61",
              "status": "affected",
              "version": "1.51",
              "versionType": "custom"
            },
            {
              "lessThan": "1.59.51",
              "status": "affected",
              "version": "1.59",
              "versionType": "custom"
            },
            {
              "lessThan": "1.71.26",
              "status": "affected",
              "version": "1.71",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "Patch",
          "vendor": "Tanium",
          "versions": [
            {
              "lessThan": "3.24.328",
              "status": "affected",
              "version": "3.24",
              "versionType": "custom"
            },
            {
              "lessThan": "3.28.346",
              "status": "affected",
              "version": "3.28",
              "versionType": "custom"
            },
            {
              "lessThan": "3.32.383",
              "status": "affected",
              "version": "3.32",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "Performance",
          "vendor": "Tanium",
          "versions": [
            {
              "lessThan": "1.25.196",
              "status": "affected",
              "version": "1.25",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "Reputation",
          "vendor": "Tanium",
          "versions": [
            {
              "lessThan": "6.6.150",
              "status": "affected",
              "version": "6.6",
              "versionType": "custom"
            },
            {
              "lessThan": "6.7.143",
              "status": "affected",
              "version": "6.7",
              "versionType": "custom"
            },
            {
              "lessThan": "6.8.167",
              "status": "affected",
              "version": "6.8",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "Reveal",
          "vendor": "Tanium",
          "versions": [
            {
              "lessThan": "2.4.109",
              "status": "affected",
              "version": "2.4",
              "versionType": "custom"
            },
            {
              "lessThan": "2.5.166",
              "status": "affected",
              "version": "2.5",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "Threat Response",
          "vendor": "Tanium",
          "versions": [
            {
              "lessThan": "4.9.480",
              "status": "affected",
              "version": "4.9",
              "versionType": "custom"
            },
            {
              "lessThan": "4.12.353",
              "status": "affected",
              "version": "4.12",
              "versionType": "custom"
            },
            {
              "lessThan": "4.17.333",
              "status": "affected",
              "version": "4.17",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "Provision Host",
          "vendor": "Tanium",
          "versions": [
            {
              "lessThan": "10.4.100",
              "status": "affected",
              "version": "10.4.100",
              "versionType": "semver"
            },
            {
              "lessThan": "10.8.115",
              "status": "affected",
              "version": "10.8.115",
              "versionType": "semver"
            },
            {
              "lessThan": "10.9.113",
              "status": "affected",
              "version": "10.9.113",
              "versionType": "semver"
            },
            {
              "lessThan": "10.10.189",
              "status": "affected",
              "version": "10.10.189",
              "versionType": "semver"
            },
            {
              "lessThan": "10.11.127",
              "status": "affected",
              "version": "10.11.127",
              "versionType": "semver"
            }
          ]
        }
      ],
      "dateAssigned": "2026-11-03T14:58:46.819Z",
      "datePublic": "2026-11-03T22:12:11.458Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "Tanium addressed an improper certificate validation vulnerability in multiple products. Products have been updated to distrust several intermediate CA certificates associated with compromised private keys."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "baseScore": 7.4,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N",
            "version": "3.1"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-295",
              "description": "Improper Certificate Validation",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-11-04T11:24:05.622Z",
        "orgId": "3938794e-25f5-4123-a1ba-5cbd7f104512",
        "shortName": "Tanium"
      },
      "references": [
        {
          "name": "TAN-2026-092",
          "url": "https://security.tanium.com/TAN-2026-092"
        }
      ],
      "title": "Tanium addressed an improper certificate validation vulnerability in multiple products"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "3938794e-25f5-4123-a1ba-5cbd7f104512",
    "assignerShortName": "Tanium",
    "cveId": "CVE-2026-121565",
    "datePublished": "2026-11-03T22:17:22.997Z",
    "dateReserved": "2026-11-03T14:58:47.328Z",
    "dateUpdated": "2026-11-06T19:26:57.322Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}