Search

Find a vulnerability

Search criteria

    112 vulnerabilities by tanium

    CVE-2026-11391 (GCVE-0-2026-11391)

    Vulnerability from nvd – Published: 2026-07-28 18:58 – Updated: 2026-07-28 19:36
    VLAI
    Title
    Tanium addressed a SQL injection vulnerability in Patch.
    Summary
    Tanium addressed a SQL injection vulnerability in Patch.
    Severity
    6.3 (Medium)
    CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L
    SSVC
    Exploitation: none Automatable: no Technical Impact: partial
    CISA Coordinator (v2.0.3)
    CWE
    • CWE-89 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
    Assigner
    References
    Impacted products
    Vendor Product Version
    Tanium Patch Affected: 3.24.0 , < 3.24.235 (custom)
    Affected: 3.28.0 , < 3.28.232 (custom)
    Affected: 3.32.0 , < 3.32.258 (custom)
    		Create a notification for this product.
    Date Public
    2026-07-28 18:57
    Show details on NVD website
    To clipboard 

    {
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-11391",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-07-28T19:36:20.856163Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-07-28T19:36:27.465Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "Patch",
          "vendor": "Tanium",
          "versions": [
            {
              "lessThan": "3.24.235",
              "status": "affected",
              "version": "3.24.0",
              "versionType": "custom"
            },
            {
              "lessThan": "3.28.232",
              "status": "affected",
              "version": "3.28.0",
              "versionType": "custom"
            },
            {
              "lessThan": "3.32.258",
              "status": "affected",
              "version": "3.32.0",
              "versionType": "custom"
            }
          ]
        }
      ],
      "dateAssigned": "2026-06-05T16:03:56.017Z",
      "datePublic": "2026-07-28T18:57:53.357Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "Tanium addressed a SQL injection vulnerability in Patch."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "baseScore": 6.3,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "version": "3.1"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-89",
              "description": "Improper Neutralization of Special Elements used in an SQL Command (\u0027SQL Injection\u0027)",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-07-28T19:16:38.053Z",
        "orgId": "3938794e-25f5-4123-a1ba-5cbd7f104512",
        "shortName": "Tanium"
      },
      "references": [
        {
          "name": "TAN-2026-019",
          "url": "https://security.tanium.com/TAN-2026-019"
        }
      ],
      "title": "Tanium addressed a SQL injection vulnerability in Patch."
    }
  },
  "cveMetadata": {
    "assignerOrgId": "3938794e-25f5-4123-a1ba-5cbd7f104512",
    "assignerShortName": "Tanium",
    "cveId": "CVE-2026-11391",
    "datePublished": "2026-07-28T18:58:06.313Z",
    "dateReserved": "2026-06-05T16:03:56.942Z",
    "dateUpdated": "2026-07-28T19:36:27.465Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

    CVE-2026-12139 (GCVE-0-2026-12139)

    Vulnerability from nvd – Published: 2026-07-21 20:25 – Updated: 2026-07-22 19:40
    VLAI
    Title
    Tanium addressed an information disclosure vulnerability in Connect.
    Summary
    Tanium addressed an information disclosure vulnerability in Connect.
    Severity
    4.4 (Medium)
    CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N
    SSVC
    Exploitation: none Automatable: no Technical Impact: partial
    CISA Coordinator (v2.0.3)
    CWE
    • CWE-214 - Invocation of Process Using Visible Sensitive Information
    Assigner
    References
    Impacted products
    Vendor Product Version
    Tanium Connect Affected: 5.29.251 , < 5.29.251 (custom)
    Affected: 5.37.156 , < 5.37.156 (custom)
    Affected: 5.47.112 , < 5.47.112 (custom)
    		Create a notification for this product.
    Date Public
    2026-07-21 20:24
    Show details on NVD website
    To clipboard 

    {
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-12139",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-07-22T19:31:53.823237Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-07-22T19:40:47.897Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "Connect",
          "vendor": "Tanium",
          "versions": [
            {
              "lessThan": "5.29.251",
              "status": "affected",
              "version": "5.29.251",
              "versionType": "custom"
            },
            {
              "lessThan": "5.37.156",
              "status": "affected",
              "version": "5.37.156",
              "versionType": "custom"
            },
            {
              "lessThan": "5.47.112",
              "status": "affected",
              "version": "5.47.112",
              "versionType": "custom"
            }
          ]
        }
      ],
      "dateAssigned": "2026-06-12T17:05:55.160Z",
      "datePublic": "2026-07-21T20:24:54.407Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "Tanium addressed an information disclosure vulnerability in Connect."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "baseScore": 4.4,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N",
            "version": "3.1"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-214",
              "description": "Invocation of Process Using Visible Sensitive Information",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-07-21T20:25:14.577Z",
        "orgId": "3938794e-25f5-4123-a1ba-5cbd7f104512",
        "shortName": "Tanium"
      },
      "references": [
        {
          "name": "TAN-2026-018",
          "url": "https://security.tanium.com/TAN-2026-018"
        }
      ],
      "title": "Tanium addressed an information disclosure vulnerability in Connect."
    }
  },
  "cveMetadata": {
    "assignerOrgId": "3938794e-25f5-4123-a1ba-5cbd7f104512",
    "assignerShortName": "Tanium",
    "cveId": "CVE-2026-12139",
    "datePublished": "2026-07-21T20:25:14.577Z",
    "dateReserved": "2026-06-12T17:05:55.702Z",
    "dateUpdated": "2026-07-22T19:40:47.897Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

    CVE-2026-11925 (GCVE-0-2026-11925)

    Vulnerability from nvd – Published: 2026-07-21 20:25 – Updated: 2026-07-22 19:40
    VLAI
    Title
    Tanium addressed a User Interface (UI) Misrepresentation of Critical Information vulnerability in Tanium Server.
    Summary
    Tanium addressed a User Interface (UI) Misrepresentation of Critical Information vulnerability in Tanium Server.
    Severity
    2.7 (Low)
    CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:N
    SSVC
    Exploitation: none Automatable: no Technical Impact: partial
    CISA Coordinator (v2.0.3)
    CWE
    • CWE-451 - User Interface (UI) Misrepresentation of Critical Information
    Assigner
    References
    Impacted products
    Vendor Product Version
    Tanium Tanium Server Affected: 7.7.3.8298 , < 7.7.3.8298 (custom)
    Affected: 7.8.2.1198 , < 7.8.2.1198 (custom)
    Affected: 7.8.4.1327 , < 7.8.4.1327 (custom)
    		Create a notification for this product.
    Date Public
    2026-07-21 20:24
    Show details on NVD website
    To clipboard 

    {
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-11925",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-07-22T19:31:52.375143Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-07-22T19:40:54.065Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "Tanium Server",
          "vendor": "Tanium",
          "versions": [
            {
              "lessThan": "7.7.3.8298",
              "status": "affected",
              "version": "7.7.3.8298",
              "versionType": "custom"
            },
            {
              "lessThan": "7.8.2.1198",
              "status": "affected",
              "version": "7.8.2.1198",
              "versionType": "custom"
            },
            {
              "lessThan": "7.8.4.1327",
              "status": "affected",
              "version": "7.8.4.1327",
              "versionType": "custom"
            }
          ]
        }
      ],
      "dateAssigned": "2026-06-10T17:57:46.520Z",
      "datePublic": "2026-07-21T20:24:50.150Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "Tanium addressed a User Interface (UI) Misrepresentation of Critical Information vulnerability in Tanium Server."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "baseScore": 2.7,
            "baseSeverity": "LOW",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:N",
            "version": "3.1"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-451",
              "description": "User Interface (UI) Misrepresentation of Critical Information",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-07-21T20:25:02.468Z",
        "orgId": "3938794e-25f5-4123-a1ba-5cbd7f104512",
        "shortName": "Tanium"
      },
      "references": [
        {
          "name": "TAN-2026-017",
          "url": "https://security.tanium.com/TAN-2026-017"
        }
      ],
      "title": "Tanium addressed a User Interface (UI) Misrepresentation of Critical Information vulnerability in Tanium Server."
    }
  },
  "cveMetadata": {
    "assignerOrgId": "3938794e-25f5-4123-a1ba-5cbd7f104512",
    "assignerShortName": "Tanium",
    "cveId": "CVE-2026-11925",
    "datePublished": "2026-07-21T20:25:02.468Z",
    "dateReserved": "2026-06-10T17:57:47.060Z",
    "dateUpdated": "2026-07-22T19:40:54.065Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

    CVE-2026-15053 (GCVE-0-2026-15053)

    Vulnerability from nvd – Published: 2026-07-08 13:46 – Updated: 2026-07-08 14:27
    VLAI
    Title
    Tanium addressed a denial of service vulnerability in Tanium Server.
    Summary
    Tanium addressed a denial of service vulnerability in Tanium Server.
    Severity
    7.5 (High)
    CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
    SSVC
    Exploitation: none Automatable: yes Technical Impact: partial
    CISA Coordinator (v2.0.3)
    CWE
    • CWE-789 - Memory Allocation with Excessive Size Value
    Assigner
    References
    Impacted products
    Vendor Product Version
    Tanium Tanium Server Affected: 7.7.3.8298 , < 7.7.3.8298 (custom)
    Affected: 7.8.2.1198 , < 7.8.2.1198 (custom)
    Affected: 7.8.4.1327 , < 7.8.4.1327 (custom)
    		Create a notification for this product.
    Date Public
    2026-07-07 20:17
    Show details on NVD website
    To clipboard 

    {
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-15053",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "yes"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-07-08T14:27:30.302303Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-07-08T14:27:37.033Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "Tanium Server",
          "vendor": "Tanium",
          "versions": [
            {
              "lessThan": "7.7.3.8298",
              "status": "affected",
              "version": "7.7.3.8298",
              "versionType": "custom"
            },
            {
              "lessThan": "7.8.2.1198",
              "status": "affected",
              "version": "7.8.2.1198",
              "versionType": "custom"
            },
            {
              "lessThan": "7.8.4.1327",
              "status": "affected",
              "version": "7.8.4.1327",
              "versionType": "custom"
            }
          ]
        }
      ],
      "dateAssigned": "2026-07-08T13:33:20.107Z",
      "datePublic": "2026-07-07T20:17:39.951Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "Tanium addressed a denial of service vulnerability in Tanium Server."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-789",
              "description": "Memory Allocation with Excessive Size Value",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-07-08T13:46:40.902Z",
        "orgId": "3938794e-25f5-4123-a1ba-5cbd7f104512",
        "shortName": "Tanium"
      },
      "references": [
        {
          "name": "TAN-2026-016",
          "url": "https://security.tanium.com/TAN-2026-016"
        }
      ],
      "title": "Tanium addressed a denial of service vulnerability in Tanium Server."
    }
  },
  "cveMetadata": {
    "assignerOrgId": "3938794e-25f5-4123-a1ba-5cbd7f104512",
    "assignerShortName": "Tanium",
    "cveId": "CVE-2026-15053",
    "datePublished": "2026-07-08T13:46:40.902Z",
    "dateReserved": "2026-07-08T13:33:20.588Z",
    "dateUpdated": "2026-07-08T14:27:37.033Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

    CVE-2026-9208 (GCVE-0-2026-9208)

    Vulnerability from nvd – Published: 2026-05-27 20:59 – Updated: 2026-05-28 13:22
    VLAI
    Title
    Tanium addressed an unauthorized code execution vulnerability in Connect.
    Summary
    Tanium addressed an unauthorized code execution vulnerability in Connect.
    Severity
    8.8 (High)
    CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
    SSVC
    Exploitation: none Automatable: no Technical Impact: total
    CISA Coordinator (v2.0.3)
    CWE
    • CWE-78 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
    Assigner
    References
    Impacted products
    Vendor Product Version
    Tanium Connect Affected: 5.26 , < 5.26.191 (custom)
    Affected: 5.29 , < 5.29.237 (custom)
    Affected: 5.37 , < 5.37.140 (custom)
    		Create a notification for this product.
    Date Public
    2026-05-27 20:59
    Show details on NVD website
    To clipboard 

    {
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-9208",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-05-28T13:22:21.390236Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-05-28T13:22:32.052Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "Connect",
          "vendor": "Tanium",
          "versions": [
            {
              "lessThan": "5.26.191",
              "status": "affected",
              "version": "5.26",
              "versionType": "custom"
            },
            {
              "lessThan": "5.29.237",
              "status": "affected",
              "version": "5.29",
              "versionType": "custom"
            },
            {
              "lessThan": "5.37.140",
              "status": "affected",
              "version": "5.37",
              "versionType": "custom"
            }
          ]
        }
      ],
      "dateAssigned": "2026-05-21T16:49:31.914Z",
      "datePublic": "2026-05-27T20:59:31.374Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "Tanium addressed an unauthorized code execution vulnerability in Connect."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "baseScore": 8.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-78",
              "description": "Improper Neutralization of Special Elements used in an OS Command (\u0027OS Command Injection\u0027)",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-05-27T20:59:43.199Z",
        "orgId": "3938794e-25f5-4123-a1ba-5cbd7f104512",
        "shortName": "Tanium"
      },
      "references": [
        {
          "name": "TAN-2026-015",
          "url": "https://security.tanium.com/TAN-2026-015"
        }
      ],
      "title": "Tanium addressed an unauthorized code execution vulnerability in Connect."
    }
  },
  "cveMetadata": {
    "assignerOrgId": "3938794e-25f5-4123-a1ba-5cbd7f104512",
    "assignerShortName": "Tanium",
    "cveId": "CVE-2026-9208",
    "datePublished": "2026-05-27T20:59:43.199Z",
    "dateReserved": "2026-05-21T16:49:32.433Z",
    "dateUpdated": "2026-05-28T13:22:32.052Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

    CVE-2026-9207 (GCVE-0-2026-9207)

    Vulnerability from nvd – Published: 2026-05-27 01:19 – Updated: 2026-05-27 14:07
    VLAI
    Title
    Tanium addressed an unauthorized code execution vulnerability in Connect.
    Summary
    Tanium addressed an unauthorized code execution vulnerability in Connect.
    Severity
    8.8 (High)
    CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
    SSVC
    Exploitation: none Automatable: no Technical Impact: total
    CISA Coordinator (v2.0.3)
    CWE
    • CWE-78 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
    Assigner
    References
    Impacted products
    Vendor Product Version
    Tanium Connect Affected: 5.26 , < 5.26.191 (custom)
    Affected: 5.29 , < 5.29.237 (custom)
    Affected: 5.37 , < 5.37.140 (custom)
    		Create a notification for this product.
    Date Public
    2026-05-27 01:19
    Show details on NVD website
    To clipboard 

    {
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-9207",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-05-27T13:50:58.138797Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-05-27T13:51:16.867Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "Connect",
          "vendor": "Tanium",
          "versions": [
            {
              "lessThan": "5.26.191",
              "status": "affected",
              "version": "5.26",
              "versionType": "custom"
            },
            {
              "lessThan": "5.29.237",
              "status": "affected",
              "version": "5.29",
              "versionType": "custom"
            },
            {
              "lessThan": "5.37.140",
              "status": "affected",
              "version": "5.37",
              "versionType": "custom"
            }
          ]
        }
      ],
      "dateAssigned": "2026-05-21T16:46:15.094Z",
      "datePublic": "2026-05-27T01:19:08.632Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "Tanium addressed an unauthorized code execution vulnerability in Connect."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "baseScore": 8.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-78",
              "description": "Improper Neutralization of Special Elements used in an OS Command (\u0027OS Command Injection\u0027)",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-05-27T14:07:47.038Z",
        "orgId": "3938794e-25f5-4123-a1ba-5cbd7f104512",
        "shortName": "Tanium"
      },
      "references": [
        {
          "name": "TAN-2026-014",
          "url": "https://security.tanium.com/TAN-2026-014"
        }
      ],
      "title": "Tanium addressed an unauthorized code execution vulnerability in Connect."
    }
  },
  "cveMetadata": {
    "assignerOrgId": "3938794e-25f5-4123-a1ba-5cbd7f104512",
    "assignerShortName": "Tanium",
    "cveId": "CVE-2026-9207",
    "datePublished": "2026-05-27T01:19:26.555Z",
    "dateReserved": "2026-05-21T16:46:15.651Z",
    "dateUpdated": "2026-05-27T14:07:47.038Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

    CVE-2026-9156 (GCVE-0-2026-9156)

    Vulnerability from nvd – Published: 2026-05-27 01:19 – Updated: 2026-05-27 13:50
    VLAI
    Title
    Tanium addressed a denial of service vulnerability in Tanium Server.
    Summary
    Tanium addressed a denial of service vulnerability in Tanium Server.
    Severity
    6.5 (Medium)
    CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
    SSVC
    Exploitation: none Automatable: no Technical Impact: partial
    CISA Coordinator (v2.0.3)
    CWE
    • CWE-772 - Missing Release of Resource after Effective Lifetime
    Assigner
    References
    Impacted products
    Vendor Product Version
    Tanium Tanium Server Affected: 7.6.4.0 , < 7.6.4.2190 (custom)
    Affected: 7.7.3.0 , < 7.7.3.8274 (custom)
    Affected: 7.8.2.0 , < 7.8.2.1176 (custom)
    		Create a notification for this product.
    Date Public
    2026-05-27 01:19
    Show details on NVD website
    To clipboard 

    {
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-9156",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-05-27T13:50:31.230808Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-05-27T13:50:44.570Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "Tanium Server",
          "vendor": "Tanium",
          "versions": [
            {
              "lessThan": "7.6.4.2190",
              "status": "affected",
              "version": "7.6.4.0",
              "versionType": "custom"
            },
            {
              "lessThan": "7.7.3.8274",
              "status": "affected",
              "version": "7.7.3.0",
              "versionType": "custom"
            },
            {
              "lessThan": "7.8.2.1176",
              "status": "affected",
              "version": "7.8.2.0",
              "versionType": "custom"
            }
          ]
        }
      ],
      "dateAssigned": "2026-05-21T01:21:37.531Z",
      "datePublic": "2026-05-27T01:19:03.729Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "Tanium addressed a denial of service vulnerability in Tanium Server."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "version": "3.1"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-772",
              "description": "Missing Release of Resource after Effective Lifetime",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-05-27T01:19:26.286Z",
        "orgId": "3938794e-25f5-4123-a1ba-5cbd7f104512",
        "shortName": "Tanium"
      },
      "references": [
        {
          "name": "TAN-2026-013",
          "url": "https://security.tanium.com/TAN-2026-013"
        }
      ],
      "title": "Tanium addressed a denial of service vulnerability in Tanium Server."
    }
  },
  "cveMetadata": {
    "assignerOrgId": "3938794e-25f5-4123-a1ba-5cbd7f104512",
    "assignerShortName": "Tanium",
    "cveId": "CVE-2026-9156",
    "datePublished": "2026-05-27T01:19:26.286Z",
    "dateReserved": "2026-05-21T01:21:38.154Z",
    "dateUpdated": "2026-05-27T13:50:44.570Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

    CVE-2026-6416 (GCVE-0-2026-6416)

    Vulnerability from nvd – Published: 2026-04-22 01:46 – Updated: 2026-04-22 12:57
    VLAI
    Title
    Tanium addressed an uncontrolled resource consumption vulnerability in Interact.
    Summary
    Tanium addressed an uncontrolled resource consumption vulnerability in Interact.
    Severity
    2.7 (Low)
    CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:L
    SSVC
    Exploitation: none Automatable: no Technical Impact: partial
    CISA Coordinator (v2.0.3)
    CWE
    • CWE-400 - Uncontrolled Resource Consumption
    Assigner
    References
    Impacted products
    Vendor Product Version
    Tanium Interact Affected: 3.2.0 , < 3.2.202 (custom)
    Affected: 3.5.0 , < 3.5.108 (custom)
    Affected: 3.8.0 , < 3.8.47 (custom)
        cpe:2.3:a:tanium:service_interact:3.2.196:*:*:*:*:*:*:*
        cpe:2.3:a:tanium:service_interact:3.5.102:*:*:*:*:*:*:*
        cpe:2.3:a:tanium:service_interact:3.8.46:*:*:*:*:*:*:*
    		 Create a notification for this product.
    Date Public
    2026-04-22 01:46
    Credits
    Eric Bester
    Show details on NVD website
    To clipboard 

    {
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-6416",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-04-22T12:57:48.199961Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-04-22T12:57:59.571Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "cpes": [
            "cpe:2.3:a:tanium:service_interact:3.2.196:*:*:*:*:*:*:*",
            "cpe:2.3:a:tanium:service_interact:3.5.102:*:*:*:*:*:*:*",
            "cpe:2.3:a:tanium:service_interact:3.8.46:*:*:*:*:*:*:*"
          ],
          "product": "Interact",
          "vendor": "Tanium",
          "versions": [
            {
              "lessThan": "3.2.202",
              "status": "affected",
              "version": "3.2.0",
              "versionType": "custom"
            },
            {
              "lessThan": "3.5.108",
              "status": "affected",
              "version": "3.5.0",
              "versionType": "custom"
            },
            {
              "lessThan": "3.8.47",
              "status": "affected",
              "version": "3.8.0",
              "versionType": "custom"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "type": "reporter",
          "value": "Eric Bester"
        }
      ],
      "dateAssigned": "2026-04-15T23:55:39.195Z",
      "datePublic": "2026-04-22T01:46:08.322Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "Tanium addressed an uncontrolled resource consumption vulnerability in Interact."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "baseScore": 2.7,
            "baseSeverity": "LOW",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:L",
            "version": "3.1"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-400",
              "description": "Uncontrolled Resource Consumption",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-04-22T01:46:19.376Z",
        "orgId": "3938794e-25f5-4123-a1ba-5cbd7f104512",
        "shortName": "Tanium"
      },
      "references": [
        {
          "name": "TAN-2026-010",
          "url": "https://security.tanium.com/TAN-2026-010"
        }
      ],
      "title": "Tanium addressed an uncontrolled resource consumption vulnerability in Interact."
    }
  },
  "cveMetadata": {
    "assignerOrgId": "3938794e-25f5-4123-a1ba-5cbd7f104512",
    "assignerShortName": "Tanium",
    "cveId": "CVE-2026-6416",
    "datePublished": "2026-04-22T01:46:19.376Z",
    "dateReserved": "2026-04-15T23:55:39.808Z",
    "dateUpdated": "2026-04-22T12:57:59.571Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

    CVE-2026-6408 (GCVE-0-2026-6408)

    Vulnerability from nvd – Published: 2026-04-22 01:46 – Updated: 2026-04-22 12:49
    VLAI
    Title
    Tanium addressed an information disclosure vulnerability in Tanium Server.
    Summary
    Tanium addressed an information disclosure vulnerability in Tanium Server.
    Severity
    2.7 (Low)
    CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N
    SSVC
    Exploitation: none Automatable: no Technical Impact: partial
    CISA Coordinator (v2.0.3)
    CWE
    • CWE-522 - Insufficiently Protected Credentials
    Assigner
    References
    Impacted products
    Vendor Product Version
    Tanium Tanium Server Affected: 7.6.4.0 , < 7.6.4.2185 (custom)
    Affected: 7.7.3.0 , < 7.7.3.8266 (custom)
    Affected: 7.8.2.0 , < 7.8.2.1168 (custom)
    		Create a notification for this product.
    Date Public
    2026-04-22 01:46
    Show details on NVD website
    To clipboard 

    {
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-6408",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-04-22T12:48:18.544819Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-04-22T12:49:39.769Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "Tanium Server",
          "vendor": "Tanium",
          "versions": [
            {
              "lessThan": "7.6.4.2185",
              "status": "affected",
              "version": "7.6.4.0",
              "versionType": "custom"
            },
            {
              "lessThan": "7.7.3.8266",
              "status": "affected",
              "version": "7.7.3.0",
              "versionType": "custom"
            },
            {
              "lessThan": "7.8.2.1168",
              "status": "affected",
              "version": "7.8.2.0",
              "versionType": "custom"
            }
          ]
        }
      ],
      "dateAssigned": "2026-04-15T21:51:17.273Z",
      "datePublic": "2026-04-22T01:46:17.259Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "Tanium addressed an information disclosure vulnerability in Tanium Server."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "baseScore": 2.7,
            "baseSeverity": "LOW",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N",
            "version": "3.1"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-522",
              "description": "Insufficiently Protected Credentials",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-04-22T01:46:40.653Z",
        "orgId": "3938794e-25f5-4123-a1ba-5cbd7f104512",
        "shortName": "Tanium"
      },
      "references": [
        {
          "name": "TAN-2026-012",
          "url": "https://security.tanium.com/TAN-2026-012"
        }
      ],
      "title": "Tanium addressed an information disclosure vulnerability in Tanium Server."
    }
  },
  "cveMetadata": {
    "assignerOrgId": "3938794e-25f5-4123-a1ba-5cbd7f104512",
    "assignerShortName": "Tanium",
    "cveId": "CVE-2026-6408",
    "datePublished": "2026-04-22T01:46:40.653Z",
    "dateReserved": "2026-04-15T21:51:17.871Z",
    "dateUpdated": "2026-04-22T12:49:39.769Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

    CVE-2026-6392 (GCVE-0-2026-6392)

    Vulnerability from nvd – Published: 2026-04-22 01:46 – Updated: 2026-04-22 12:54
    VLAI
    Title
    Tanium addressed an information disclosure vulnerability in Threat Response.
    Summary
    Tanium addressed an information disclosure vulnerability in Threat Response.
    Severity
    2.7 (Low)
    CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N
    SSVC
    Exploitation: none Automatable: no Technical Impact: partial
    CISA Coordinator (v2.0.3)
    CWE
    • CWE-200 - Exposure of Sensitive Information to an Unauthorized Actor
    Assigner
    References
    Impacted products
    Vendor Product Version
    Tanium Threat Response Affected: 4.6.0 , < 4.6.577 (custom)
    Affected: 4.9.0 , < 4.9.379 (custom)
    		Create a notification for this product.
    Date Public
    2026-04-22 01:46
    Show details on NVD website
    To clipboard 

    {
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-6392",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-04-22T12:54:38.845263Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-04-22T12:54:52.343Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "Threat Response",
          "vendor": "Tanium",
          "versions": [
            {
              "lessThan": "4.6.577",
              "status": "affected",
              "version": "4.6.0",
              "versionType": "custom"
            },
            {
              "lessThan": "4.9.379",
              "status": "affected",
              "version": "4.9.0",
              "versionType": "custom"
            }
          ]
        }
      ],
      "dateAssigned": "2026-04-15T20:04:30.169Z",
      "datePublic": "2026-04-22T01:46:13.287Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "Tanium addressed an information disclosure vulnerability in Threat Response."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "baseScore": 2.7,
            "baseSeverity": "LOW",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N",
            "version": "3.1"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-200",
              "description": "Exposure of Sensitive Information to an Unauthorized Actor",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-04-22T01:46:29.651Z",
        "orgId": "3938794e-25f5-4123-a1ba-5cbd7f104512",
        "shortName": "Tanium"
      },
      "references": [
        {
          "name": "TAN-2026-011",
          "url": "https://security.tanium.com/TAN-2026-011"
        }
      ],
      "title": "Tanium addressed an information disclosure vulnerability in Threat Response."
    }
  },
  "cveMetadata": {
    "assignerOrgId": "3938794e-25f5-4123-a1ba-5cbd7f104512",
    "assignerShortName": "Tanium",
    "cveId": "CVE-2026-6392",
    "datePublished": "2026-04-22T01:46:29.651Z",
    "dateReserved": "2026-04-15T20:04:30.751Z",
    "dateUpdated": "2026-04-22T12:54:52.343Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

    CVE-2026-2605 (GCVE-0-2026-2605)

    Vulnerability from nvd – Published: 2026-02-19 23:10 – Updated: 2026-03-02 15:51
    VLAI
    Title
    Tanium addressed an insertion of sensitive information into log file vulnerability in TanOS.
    Summary
    Tanium addressed an insertion of sensitive information into log file vulnerability in TanOS.
    Severity
    5.3 (Medium)
    CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N
    SSVC
    Exploitation: none Automatable: no Technical Impact: partial
    CISA Coordinator (v2.0.3)
    CWE
    • CWE-532 - Insertion of Sensitive Information into Log File
    Assigner
    References
    Impacted products
    Vendor Product Version
    Tanium TanOS Affected: 1.8.4 , < 1.8.4.0249 (custom)
    Affected: 1.8.5 , < 1.8.5.0282 (custom)
    Affected: 1.8.6 , < 1.8.6.0150 (custom)
        cpe:2.3:a:tanium:tanos:1.8.4.0249:*:*:*:*:*:*:*
        cpe:2.3:a:tanium:tanos:1.8.5.0282:*:*:*:*:*:*:*
        cpe:2.3:a:tanium:tanos:1.8.6.0150:*:*:*:*:*:*:*
    		 Create a notification for this product.
    Date Public
    2026-02-19 23:09
    Show details on NVD website
    To clipboard 

    {
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-2605",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-03-02T15:51:21.997907Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-03-02T15:51:41.710Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "cpes": [
            "cpe:2.3:a:tanium:tanos:1.8.4.0249:*:*:*:*:*:*:*",
            "cpe:2.3:a:tanium:tanos:1.8.5.0282:*:*:*:*:*:*:*",
            "cpe:2.3:a:tanium:tanos:1.8.6.0150:*:*:*:*:*:*:*"
          ],
          "product": "TanOS",
          "vendor": "Tanium",
          "versions": [
            {
              "lessThan": "1.8.4.0249",
              "status": "affected",
              "version": "1.8.4",
              "versionType": "custom"
            },
            {
              "lessThan": "1.8.5.0282",
              "status": "affected",
              "version": "1.8.5",
              "versionType": "custom"
            },
            {
              "lessThan": "1.8.6.0150",
              "status": "affected",
              "version": "1.8.6",
              "versionType": "custom"
            }
          ]
        }
      ],
      "dateAssigned": "2026-02-16T21:37:14.785Z",
      "datePublic": "2026-02-19T23:09:49.159Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "Tanium addressed an insertion of sensitive information into log file vulnerability in TanOS."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "baseScore": 5.3,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "version": "3.1"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-532",
              "description": "Insertion of Sensitive Information into Log File",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-02-19T23:13:38.465Z",
        "orgId": "3938794e-25f5-4123-a1ba-5cbd7f104512",
        "shortName": "Tanium"
      },
      "references": [
        {
          "name": "TAN-2026-006",
          "url": "https://security.tanium.com/TAN-2026-006"
        }
      ],
      "title": "Tanium addressed an insertion of sensitive information into log file vulnerability in TanOS."
    }
  },
  "cveMetadata": {
    "assignerOrgId": "3938794e-25f5-4123-a1ba-5cbd7f104512",
    "assignerShortName": "Tanium",
    "cveId": "CVE-2026-2605",
    "datePublished": "2026-02-19T23:10:02.867Z",
    "dateReserved": "2026-02-16T21:37:15.555Z",
    "dateUpdated": "2026-03-02T15:51:41.710Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

    CVE-2026-2435 (GCVE-0-2026-2435)

    Vulnerability from nvd – Published: 2026-02-19 23:09 – Updated: 2026-03-02 15:55
    VLAI
    Title
    ASSET-7706
    Summary
    Tanium addressed a SQL injection vulnerability in Asset.
    Severity
    6.3 (Medium)
    CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L
    SSVC
    Exploitation: none Automatable: no Technical Impact: partial
    CISA Coordinator (v2.0.3)
    CWE
    • CWE-89 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
    Assigner
    References
    Impacted products
    Vendor Product Version
    Tanium Asset Affected: 1.32 , < 1.32.179 (custom)
    Affected: 1.33 , < 1.33.269 (custom)
    Affected: 1.36 , < 1.36.108 (custom)
        cpe:2.3:a:tanium:service_asset:1.32.178:*:*:*:*:*:*:*
        cpe:2.3:a:tanium:service_asset:1.33.268:*:*:*:*:*:*:*
        cpe:2.3:a:tanium:service_asset:1.36.107:*:*:*:*:*:*:*
    		 Create a notification for this product.
    Date Public
    2026-02-19 23:09
    Show details on NVD website
    To clipboard 

    {
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-2435",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-03-02T15:55:19.435641Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-03-02T15:55:43.064Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "cpes": [
            "cpe:2.3:a:tanium:service_asset:1.32.178:*:*:*:*:*:*:*",
            "cpe:2.3:a:tanium:service_asset:1.33.268:*:*:*:*:*:*:*",
            "cpe:2.3:a:tanium:service_asset:1.36.107:*:*:*:*:*:*:*"
          ],
          "product": "Asset",
          "vendor": "Tanium",
          "versions": [
            {
              "lessThan": "1.32.179",
              "status": "affected",
              "version": "1.32",
              "versionType": "custom"
            },
            {
              "lessThan": "1.33.269",
              "status": "affected",
              "version": "1.33",
              "versionType": "custom"
            },
            {
              "lessThan": "1.36.108",
              "status": "affected",
              "version": "1.36",
              "versionType": "custom"
            }
          ]
        }
      ],
      "dateAssigned": "2026-02-12T22:26:04.213Z",
      "datePublic": "2026-02-19T23:09:30.641Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "Tanium addressed a SQL injection vulnerability in Asset."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "baseScore": 6.3,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "version": "3.1"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-89",
              "description": "Improper Neutralization of Special Elements used in an SQL Command (\u0027SQL Injection\u0027)",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-02-19T23:09:41.110Z",
        "orgId": "3938794e-25f5-4123-a1ba-5cbd7f104512",
        "shortName": "Tanium"
      },
      "references": [
        {
          "name": "TAN-2026-004",
          "url": "https://security.tanium.com/TAN-2026-004"
        }
      ],
      "title": "ASSET-7706"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "3938794e-25f5-4123-a1ba-5cbd7f104512",
    "assignerShortName": "Tanium",
    "cveId": "CVE-2026-2435",
    "datePublished": "2026-02-19T23:09:41.110Z",
    "dateReserved": "2026-02-12T22:26:04.828Z",
    "dateUpdated": "2026-03-02T15:55:43.064Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

    CVE-2026-2408 (GCVE-0-2026-2408)

    Vulnerability from nvd – Published: 2026-02-19 23:09 – Updated: 2026-03-02 15:55
    VLAI
    Title
    Use-after-free in Cloud Workloads
    Summary
    Tanium addressed a use-after-free vulnerability in the Cloud Workloads Enforce client extension.
    Severity
    4.7 (Medium)
    CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H
    SSVC
    Exploitation: none Automatable: no Technical Impact: partial
    CISA Coordinator (v2.0.3)
    CWE
    Assigner
    References
    Impacted products
    Vendor Product Version
    Tanium Cloud Workloads Affected: 1.0.222 , < 1.0.222 (custom)
        cpe:2.3:a:tanium:service_cloudworkloads:1.0.221:*:*:*:*:*:*:*
    		 Create a notification for this product.
    Date Public
    2026-02-19 23:09
    Show details on NVD website
    To clipboard 

    {
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-2408",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-03-02T15:54:55.216169Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-03-02T15:55:09.813Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "cpes": [
            "cpe:2.3:a:tanium:service_cloudworkloads:1.0.221:*:*:*:*:*:*:*"
          ],
          "product": "Cloud Workloads",
          "vendor": "Tanium",
          "versions": [
            {
              "lessThan": "1.0.222",
              "status": "affected",
              "version": "1.0.222",
              "versionType": "custom"
            }
          ]
        }
      ],
      "dateAssigned": "2026-02-12T13:49:48.721Z",
      "datePublic": "2026-02-19T23:09:40.352Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "Tanium addressed a use-after-free vulnerability in the Cloud Workloads Enforce client extension."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "baseScore": 4.7,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-416",
              "description": "Use After Free",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-02-19T23:09:51.620Z",
        "orgId": "3938794e-25f5-4123-a1ba-5cbd7f104512",
        "shortName": "Tanium"
      },
      "references": [
        {
          "name": "TAN-2026-005",
          "url": "https://security.tanium.com/TAN-2026-005"
        }
      ],
      "title": "Use-after-free in Cloud Workloads"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "3938794e-25f5-4123-a1ba-5cbd7f104512",
    "assignerShortName": "Tanium",
    "cveId": "CVE-2026-2408",
    "datePublished": "2026-02-19T23:09:51.620Z",
    "dateReserved": "2026-02-12T13:49:49.307Z",
    "dateUpdated": "2026-03-02T15:55:09.813Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

    CVE-2026-2350 (GCVE-0-2026-2350)

    Vulnerability from nvd – Published: 2026-02-19 23:10 – Updated: 2026-03-02 15:50
    VLAI
    Title
    Tanium addressed an insertion of sensitive information into log file vulnerability in Interact and TDS.
    Summary
    Tanium addressed an insertion of sensitive information into log file vulnerability in Interact and TDS.
    Severity
    6.5 (Medium)
    CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
    SSVC
    Exploitation: none Automatable: no Technical Impact: partial
    CISA Coordinator (v2.0.3)
    CWE
    • CWE-532 - Insertion of Sensitive Information into Log File
    Assigner
    References
    Impacted products
    Vendor Product Version
    Tanium Interact Affected: 3.2.0 , < 3.2.196 (custom)
    Affected: 3.5.0 , < 3.5.102 (custom)
        cpe:2.3:a:tanium:service_interact:3.2.195:*:*:*:*:*:*:*
        cpe:2.3:a:tanium:service_interact:3.5.101:*:*:*:*:*:*:*
    		 Create a notification for this product.
    Tanium TDS Affected: 4.1.0 , < 4.1.257 (custom)
        cpe:2.3:a:tanium:service_tds:4.1.256:*:*:*:*:*:*:*
    		 Create a notification for this product.
    Date Public
    2026-02-19 23:10
    Show details on NVD website
    To clipboard 

    {
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-2350",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-03-02T15:41:02.790036Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-03-02T15:50:27.043Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "cpes": [
            "cpe:2.3:a:tanium:service_interact:3.2.195:*:*:*:*:*:*:*",
            "cpe:2.3:a:tanium:service_interact:3.5.101:*:*:*:*:*:*:*"
          ],
          "product": "Interact",
          "vendor": "Tanium",
          "versions": [
            {
              "lessThan": "3.2.196",
              "status": "affected",
              "version": "3.2.0",
              "versionType": "custom"
            },
            {
              "lessThan": "3.5.102",
              "status": "affected",
              "version": "3.5.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "cpes": [
            "cpe:2.3:a:tanium:service_tds:4.1.256:*:*:*:*:*:*:*"
          ],
          "product": "TDS",
          "vendor": "Tanium",
          "versions": [
            {
              "lessThan": "4.1.257",
              "status": "affected",
              "version": "4.1.0",
              "versionType": "custom"
            }
          ]
        }
      ],
      "dateAssigned": "2026-02-11T16:04:36.295Z",
      "datePublic": "2026-02-19T23:10:05.500Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "Tanium addressed an insertion of sensitive information into log file vulnerability in Interact and TDS."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "version": "3.1"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-532",
              "description": "Insertion of Sensitive Information into Log File",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-02-19T23:14:23.480Z",
        "orgId": "3938794e-25f5-4123-a1ba-5cbd7f104512",
        "shortName": "Tanium"
      },
      "references": [
        {
          "name": "TAN-2026-008",
          "url": "https://security.tanium.com/TAN-2026-008"
        }
      ],
      "title": "Tanium addressed an insertion of sensitive information into log file vulnerability in Interact and TDS."
    }
  },
  "cveMetadata": {
    "assignerOrgId": "3938794e-25f5-4123-a1ba-5cbd7f104512",
    "assignerShortName": "Tanium",
    "cveId": "CVE-2026-2350",
    "datePublished": "2026-02-19T23:10:33.951Z",
    "dateReserved": "2026-02-11T16:04:36.872Z",
    "dateUpdated": "2026-03-02T15:50:27.043Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

    CVE-2026-1292 (GCVE-0-2026-1292)

    Vulnerability from nvd – Published: 2026-02-19 23:10 – Updated: 2026-03-02 15:50
    VLAI
    Title
    Tanium addressed an insertion of sensitive information into log file vulnerability in Trends.
    Summary
    Tanium addressed an insertion of sensitive information into log file vulnerability in Trends.
    Severity
    6.5 (Medium)
    CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
    SSVC
    Exploitation: none Automatable: no Technical Impact: partial
    CISA Coordinator (v2.0.3)
    CWE
    • CWE-532 - Insertion of Sensitive Information into Log File
    Assigner
    References
    Impacted products
    Vendor Product Version
    Tanium Trends Affected: 3.10.0 , < 3.10.20 (custom)
    Affected: 3.11.0 , < 3.11.79 (custom)
        cpe:2.3:a:tanium:service_trends:3.10.19:*:*:*:*:*:*:*
        cpe:2.3:a:tanium:service_trends:3.11.77:*:*:*:*:*:*:*
    		 Create a notification for this product.
    Date Public
    2026-02-19 23:09
    Show details on NVD website
    To clipboard 

    {
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-1292",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-03-02T15:50:37.988052Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-03-02T15:50:54.033Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "cpes": [
            "cpe:2.3:a:tanium:service_trends:3.10.19:*:*:*:*:*:*:*",
            "cpe:2.3:a:tanium:service_trends:3.11.77:*:*:*:*:*:*:*"
          ],
          "product": "Trends",
          "vendor": "Tanium",
          "versions": [
            {
              "lessThan": "3.10.20",
              "status": "affected",
              "version": "3.10.0",
              "versionType": "custom"
            },
            {
              "lessThan": "3.11.79",
              "status": "affected",
              "version": "3.11.0",
              "versionType": "custom"
            }
          ]
        }
      ],
      "dateAssigned": "2026-01-21T16:30:45.079Z",
      "datePublic": "2026-02-19T23:09:55.630Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "Tanium addressed an insertion of sensitive information into log file vulnerability in Trends."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "version": "3.1"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-532",
              "description": "Insertion of Sensitive Information into Log File",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-02-19T23:10:23.372Z",
        "orgId": "3938794e-25f5-4123-a1ba-5cbd7f104512",
        "shortName": "Tanium"
      },
      "references": [
        {
          "name": "TAN-2026-007",
          "url": "https://security.tanium.com/TAN-2026-007"
        }
      ],
      "title": "Tanium addressed an insertion of sensitive information into log file vulnerability in Trends."
    }
  },
  "cveMetadata": {
    "assignerOrgId": "3938794e-25f5-4123-a1ba-5cbd7f104512",
    "assignerShortName": "Tanium",
    "cveId": "CVE-2026-1292",
    "datePublished": "2026-02-19T23:10:23.372Z",
    "dateReserved": "2026-01-21T16:30:45.783Z",
    "dateUpdated": "2026-03-02T15:50:54.033Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

    CVE-2026-11391 (GCVE-0-2026-11391)

    Vulnerability from cvelistv5 – Published: 2026-07-28 18:58 – Updated: 2026-07-28 19:36
    VLAI
    Title
    Tanium addressed a SQL injection vulnerability in Patch.
    Summary
    Tanium addressed a SQL injection vulnerability in Patch.
    Severity
    6.3 (Medium)
    CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L
    SSVC
    Exploitation: none Automatable: no Technical Impact: partial
    CISA Coordinator (v2.0.3)
    CWE
    • CWE-89 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
    Assigner
    References
    Impacted products
    Vendor Product Version
    Tanium Patch Affected: 3.24.0 , < 3.24.235 (custom)
    Affected: 3.28.0 , < 3.28.232 (custom)
    Affected: 3.32.0 , < 3.32.258 (custom)
    		Create a notification for this product.
    Date Public
    2026-07-28 18:57
    Show details on NVD website
    To clipboard 

    {
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-11391",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-07-28T19:36:20.856163Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-07-28T19:36:27.465Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "Patch",
          "vendor": "Tanium",
          "versions": [
            {
              "lessThan": "3.24.235",
              "status": "affected",
              "version": "3.24.0",
              "versionType": "custom"
            },
            {
              "lessThan": "3.28.232",
              "status": "affected",
              "version": "3.28.0",
              "versionType": "custom"
            },
            {
              "lessThan": "3.32.258",
              "status": "affected",
              "version": "3.32.0",
              "versionType": "custom"
            }
          ]
        }
      ],
      "dateAssigned": "2026-06-05T16:03:56.017Z",
      "datePublic": "2026-07-28T18:57:53.357Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "Tanium addressed a SQL injection vulnerability in Patch."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "baseScore": 6.3,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "version": "3.1"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-89",
              "description": "Improper Neutralization of Special Elements used in an SQL Command (\u0027SQL Injection\u0027)",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-07-28T19:16:38.053Z",
        "orgId": "3938794e-25f5-4123-a1ba-5cbd7f104512",
        "shortName": "Tanium"
      },
      "references": [
        {
          "name": "TAN-2026-019",
          "url": "https://security.tanium.com/TAN-2026-019"
        }
      ],
      "title": "Tanium addressed a SQL injection vulnerability in Patch."
    }
  },
  "cveMetadata": {
    "assignerOrgId": "3938794e-25f5-4123-a1ba-5cbd7f104512",
    "assignerShortName": "Tanium",
    "cveId": "CVE-2026-11391",
    "datePublished": "2026-07-28T18:58:06.313Z",
    "dateReserved": "2026-06-05T16:03:56.942Z",
    "dateUpdated": "2026-07-28T19:36:27.465Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

    CVE-2026-12139 (GCVE-0-2026-12139)

    Vulnerability from cvelistv5 – Published: 2026-07-21 20:25 – Updated: 2026-07-22 19:40
    VLAI
    Title
    Tanium addressed an information disclosure vulnerability in Connect.
    Summary
    Tanium addressed an information disclosure vulnerability in Connect.
    Severity
    4.4 (Medium)
    CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N
    SSVC
    Exploitation: none Automatable: no Technical Impact: partial
    CISA Coordinator (v2.0.3)
    CWE
    • CWE-214 - Invocation of Process Using Visible Sensitive Information
    Assigner
    References
    Impacted products
    Vendor Product Version
    Tanium Connect Affected: 5.29.251 , < 5.29.251 (custom)
    Affected: 5.37.156 , < 5.37.156 (custom)
    Affected: 5.47.112 , < 5.47.112 (custom)
    		Create a notification for this product.
    Date Public
    2026-07-21 20:24
    Show details on NVD website
    To clipboard 

    {
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-12139",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-07-22T19:31:53.823237Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-07-22T19:40:47.897Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "Connect",
          "vendor": "Tanium",
          "versions": [
            {
              "lessThan": "5.29.251",
              "status": "affected",
              "version": "5.29.251",
              "versionType": "custom"
            },
            {
              "lessThan": "5.37.156",
              "status": "affected",
              "version": "5.37.156",
              "versionType": "custom"
            },
            {
              "lessThan": "5.47.112",
              "status": "affected",
              "version": "5.47.112",
              "versionType": "custom"
            }
          ]
        }
      ],
      "dateAssigned": "2026-06-12T17:05:55.160Z",
      "datePublic": "2026-07-21T20:24:54.407Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "Tanium addressed an information disclosure vulnerability in Connect."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "baseScore": 4.4,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N",
            "version": "3.1"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-214",
              "description": "Invocation of Process Using Visible Sensitive Information",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-07-21T20:25:14.577Z",
        "orgId": "3938794e-25f5-4123-a1ba-5cbd7f104512",
        "shortName": "Tanium"
      },
      "references": [
        {
          "name": "TAN-2026-018",
          "url": "https://security.tanium.com/TAN-2026-018"
        }
      ],
      "title": "Tanium addressed an information disclosure vulnerability in Connect."
    }
  },
  "cveMetadata": {
    "assignerOrgId": "3938794e-25f5-4123-a1ba-5cbd7f104512",
    "assignerShortName": "Tanium",
    "cveId": "CVE-2026-12139",
    "datePublished": "2026-07-21T20:25:14.577Z",
    "dateReserved": "2026-06-12T17:05:55.702Z",
    "dateUpdated": "2026-07-22T19:40:47.897Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

    CVE-2026-11925 (GCVE-0-2026-11925)

    Vulnerability from cvelistv5 – Published: 2026-07-21 20:25 – Updated: 2026-07-22 19:40
    VLAI
    Title
    Tanium addressed a User Interface (UI) Misrepresentation of Critical Information vulnerability in Tanium Server.
    Summary
    Tanium addressed a User Interface (UI) Misrepresentation of Critical Information vulnerability in Tanium Server.
    Severity
    2.7 (Low)
    CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:N
    SSVC
    Exploitation: none Automatable: no Technical Impact: partial
    CISA Coordinator (v2.0.3)
    CWE
    • CWE-451 - User Interface (UI) Misrepresentation of Critical Information
    Assigner
    References
    Impacted products
    Vendor Product Version
    Tanium Tanium Server Affected: 7.7.3.8298 , < 7.7.3.8298 (custom)
    Affected: 7.8.2.1198 , < 7.8.2.1198 (custom)
    Affected: 7.8.4.1327 , < 7.8.4.1327 (custom)
    		Create a notification for this product.
    Date Public
    2026-07-21 20:24
    Show details on NVD website
    To clipboard 

    {
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-11925",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-07-22T19:31:52.375143Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-07-22T19:40:54.065Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "Tanium Server",
          "vendor": "Tanium",
          "versions": [
            {
              "lessThan": "7.7.3.8298",
              "status": "affected",
              "version": "7.7.3.8298",
              "versionType": "custom"
            },
            {
              "lessThan": "7.8.2.1198",
              "status": "affected",
              "version": "7.8.2.1198",
              "versionType": "custom"
            },
            {
              "lessThan": "7.8.4.1327",
              "status": "affected",
              "version": "7.8.4.1327",
              "versionType": "custom"
            }
          ]
        }
      ],
      "dateAssigned": "2026-06-10T17:57:46.520Z",
      "datePublic": "2026-07-21T20:24:50.150Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "Tanium addressed a User Interface (UI) Misrepresentation of Critical Information vulnerability in Tanium Server."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "baseScore": 2.7,
            "baseSeverity": "LOW",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:N",
            "version": "3.1"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-451",
              "description": "User Interface (UI) Misrepresentation of Critical Information",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-07-21T20:25:02.468Z",
        "orgId": "3938794e-25f5-4123-a1ba-5cbd7f104512",
        "shortName": "Tanium"
      },
      "references": [
        {
          "name": "TAN-2026-017",
          "url": "https://security.tanium.com/TAN-2026-017"
        }
      ],
      "title": "Tanium addressed a User Interface (UI) Misrepresentation of Critical Information vulnerability in Tanium Server."
    }
  },
  "cveMetadata": {
    "assignerOrgId": "3938794e-25f5-4123-a1ba-5cbd7f104512",
    "assignerShortName": "Tanium",
    "cveId": "CVE-2026-11925",
    "datePublished": "2026-07-21T20:25:02.468Z",
    "dateReserved": "2026-06-10T17:57:47.060Z",
    "dateUpdated": "2026-07-22T19:40:54.065Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

    CVE-2026-15053 (GCVE-0-2026-15053)

    Vulnerability from cvelistv5 – Published: 2026-07-08 13:46 – Updated: 2026-07-08 14:27
    VLAI
    Title
    Tanium addressed a denial of service vulnerability in Tanium Server.
    Summary
    Tanium addressed a denial of service vulnerability in Tanium Server.
    Severity
    7.5 (High)
    CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
    SSVC
    Exploitation: none Automatable: yes Technical Impact: partial
    CISA Coordinator (v2.0.3)
    CWE
    • CWE-789 - Memory Allocation with Excessive Size Value
    Assigner
    References
    Impacted products
    Vendor Product Version
    Tanium Tanium Server Affected: 7.7.3.8298 , < 7.7.3.8298 (custom)
    Affected: 7.8.2.1198 , < 7.8.2.1198 (custom)
    Affected: 7.8.4.1327 , < 7.8.4.1327 (custom)
    		Create a notification for this product.
    Date Public
    2026-07-07 20:17
    Show details on NVD website
    To clipboard 

    {
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-15053",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "yes"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-07-08T14:27:30.302303Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-07-08T14:27:37.033Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "Tanium Server",
          "vendor": "Tanium",
          "versions": [
            {
              "lessThan": "7.7.3.8298",
              "status": "affected",
              "version": "7.7.3.8298",
              "versionType": "custom"
            },
            {
              "lessThan": "7.8.2.1198",
              "status": "affected",
              "version": "7.8.2.1198",
              "versionType": "custom"
            },
            {
              "lessThan": "7.8.4.1327",
              "status": "affected",
              "version": "7.8.4.1327",
              "versionType": "custom"
            }
          ]
        }
      ],
      "dateAssigned": "2026-07-08T13:33:20.107Z",
      "datePublic": "2026-07-07T20:17:39.951Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "Tanium addressed a denial of service vulnerability in Tanium Server."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-789",
              "description": "Memory Allocation with Excessive Size Value",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-07-08T13:46:40.902Z",
        "orgId": "3938794e-25f5-4123-a1ba-5cbd7f104512",
        "shortName": "Tanium"
      },
      "references": [
        {
          "name": "TAN-2026-016",
          "url": "https://security.tanium.com/TAN-2026-016"
        }
      ],
      "title": "Tanium addressed a denial of service vulnerability in Tanium Server."
    }
  },
  "cveMetadata": {
    "assignerOrgId": "3938794e-25f5-4123-a1ba-5cbd7f104512",
    "assignerShortName": "Tanium",
    "cveId": "CVE-2026-15053",
    "datePublished": "2026-07-08T13:46:40.902Z",
    "dateReserved": "2026-07-08T13:33:20.588Z",
    "dateUpdated": "2026-07-08T14:27:37.033Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

    CVE-2026-9208 (GCVE-0-2026-9208)

    Vulnerability from cvelistv5 – Published: 2026-05-27 20:59 – Updated: 2026-05-28 13:22
    VLAI
    Title
    Tanium addressed an unauthorized code execution vulnerability in Connect.
    Summary
    Tanium addressed an unauthorized code execution vulnerability in Connect.
    Severity
    8.8 (High)
    CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
    SSVC
    Exploitation: none Automatable: no Technical Impact: total
    CISA Coordinator (v2.0.3)
    CWE
    • CWE-78 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
    Assigner
    References
    Impacted products
    Vendor Product Version
    Tanium Connect Affected: 5.26 , < 5.26.191 (custom)
    Affected: 5.29 , < 5.29.237 (custom)
    Affected: 5.37 , < 5.37.140 (custom)
    		Create a notification for this product.
    Date Public
    2026-05-27 20:59
    Show details on NVD website
    To clipboard 

    {
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-9208",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-05-28T13:22:21.390236Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-05-28T13:22:32.052Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "Connect",
          "vendor": "Tanium",
          "versions": [
            {
              "lessThan": "5.26.191",
              "status": "affected",
              "version": "5.26",
              "versionType": "custom"
            },
            {
              "lessThan": "5.29.237",
              "status": "affected",
              "version": "5.29",
              "versionType": "custom"
            },
            {
              "lessThan": "5.37.140",
              "status": "affected",
              "version": "5.37",
              "versionType": "custom"
            }
          ]
        }
      ],
      "dateAssigned": "2026-05-21T16:49:31.914Z",
      "datePublic": "2026-05-27T20:59:31.374Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "Tanium addressed an unauthorized code execution vulnerability in Connect."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "baseScore": 8.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-78",
              "description": "Improper Neutralization of Special Elements used in an OS Command (\u0027OS Command Injection\u0027)",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-05-27T20:59:43.199Z",
        "orgId": "3938794e-25f5-4123-a1ba-5cbd7f104512",
        "shortName": "Tanium"
      },
      "references": [
        {
          "name": "TAN-2026-015",
          "url": "https://security.tanium.com/TAN-2026-015"
        }
      ],
      "title": "Tanium addressed an unauthorized code execution vulnerability in Connect."
    }
  },
  "cveMetadata": {
    "assignerOrgId": "3938794e-25f5-4123-a1ba-5cbd7f104512",
    "assignerShortName": "Tanium",
    "cveId": "CVE-2026-9208",
    "datePublished": "2026-05-27T20:59:43.199Z",
    "dateReserved": "2026-05-21T16:49:32.433Z",
    "dateUpdated": "2026-05-28T13:22:32.052Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

    CVE-2026-9207 (GCVE-0-2026-9207)

    Vulnerability from cvelistv5 – Published: 2026-05-27 01:19 – Updated: 2026-05-27 14:07
    VLAI
    Title
    Tanium addressed an unauthorized code execution vulnerability in Connect.
    Summary
    Tanium addressed an unauthorized code execution vulnerability in Connect.
    Severity
    8.8 (High)
    CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
    SSVC
    Exploitation: none Automatable: no Technical Impact: total
    CISA Coordinator (v2.0.3)
    CWE
    • CWE-78 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
    Assigner
    References
    Impacted products
    Vendor Product Version
    Tanium Connect Affected: 5.26 , < 5.26.191 (custom)
    Affected: 5.29 , < 5.29.237 (custom)
    Affected: 5.37 , < 5.37.140 (custom)
    		Create a notification for this product.
    Date Public
    2026-05-27 01:19
    Show details on NVD website
    To clipboard 

    {
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-9207",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-05-27T13:50:58.138797Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-05-27T13:51:16.867Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "Connect",
          "vendor": "Tanium",
          "versions": [
            {
              "lessThan": "5.26.191",
              "status": "affected",
              "version": "5.26",
              "versionType": "custom"
            },
            {
              "lessThan": "5.29.237",
              "status": "affected",
              "version": "5.29",
              "versionType": "custom"
            },
            {
              "lessThan": "5.37.140",
              "status": "affected",
              "version": "5.37",
              "versionType": "custom"
            }
          ]
        }
      ],
      "dateAssigned": "2026-05-21T16:46:15.094Z",
      "datePublic": "2026-05-27T01:19:08.632Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "Tanium addressed an unauthorized code execution vulnerability in Connect."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "baseScore": 8.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-78",
              "description": "Improper Neutralization of Special Elements used in an OS Command (\u0027OS Command Injection\u0027)",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-05-27T14:07:47.038Z",
        "orgId": "3938794e-25f5-4123-a1ba-5cbd7f104512",
        "shortName": "Tanium"
      },
      "references": [
        {
          "name": "TAN-2026-014",
          "url": "https://security.tanium.com/TAN-2026-014"
        }
      ],
      "title": "Tanium addressed an unauthorized code execution vulnerability in Connect."
    }
  },
  "cveMetadata": {
    "assignerOrgId": "3938794e-25f5-4123-a1ba-5cbd7f104512",
    "assignerShortName": "Tanium",
    "cveId": "CVE-2026-9207",
    "datePublished": "2026-05-27T01:19:26.555Z",
    "dateReserved": "2026-05-21T16:46:15.651Z",
    "dateUpdated": "2026-05-27T14:07:47.038Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

    CVE-2026-9156 (GCVE-0-2026-9156)

    Vulnerability from cvelistv5 – Published: 2026-05-27 01:19 – Updated: 2026-05-27 13:50
    VLAI
    Title
    Tanium addressed a denial of service vulnerability in Tanium Server.
    Summary
    Tanium addressed a denial of service vulnerability in Tanium Server.
    Severity
    6.5 (Medium)
    CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
    SSVC
    Exploitation: none Automatable: no Technical Impact: partial
    CISA Coordinator (v2.0.3)
    CWE
    • CWE-772 - Missing Release of Resource after Effective Lifetime
    Assigner
    References
    Impacted products
    Vendor Product Version
    Tanium Tanium Server Affected: 7.6.4.0 , < 7.6.4.2190 (custom)
    Affected: 7.7.3.0 , < 7.7.3.8274 (custom)
    Affected: 7.8.2.0 , < 7.8.2.1176 (custom)
    		Create a notification for this product.
    Date Public
    2026-05-27 01:19
    Show details on NVD website
    To clipboard 

    {
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-9156",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-05-27T13:50:31.230808Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-05-27T13:50:44.570Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "Tanium Server",
          "vendor": "Tanium",
          "versions": [
            {
              "lessThan": "7.6.4.2190",
              "status": "affected",
              "version": "7.6.4.0",
              "versionType": "custom"
            },
            {
              "lessThan": "7.7.3.8274",
              "status": "affected",
              "version": "7.7.3.0",
              "versionType": "custom"
            },
            {
              "lessThan": "7.8.2.1176",
              "status": "affected",
              "version": "7.8.2.0",
              "versionType": "custom"
            }
          ]
        }
      ],
      "dateAssigned": "2026-05-21T01:21:37.531Z",
      "datePublic": "2026-05-27T01:19:03.729Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "Tanium addressed a denial of service vulnerability in Tanium Server."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "version": "3.1"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-772",
              "description": "Missing Release of Resource after Effective Lifetime",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-05-27T01:19:26.286Z",
        "orgId": "3938794e-25f5-4123-a1ba-5cbd7f104512",
        "shortName": "Tanium"
      },
      "references": [
        {
          "name": "TAN-2026-013",
          "url": "https://security.tanium.com/TAN-2026-013"
        }
      ],
      "title": "Tanium addressed a denial of service vulnerability in Tanium Server."
    }
  },
  "cveMetadata": {
    "assignerOrgId": "3938794e-25f5-4123-a1ba-5cbd7f104512",
    "assignerShortName": "Tanium",
    "cveId": "CVE-2026-9156",
    "datePublished": "2026-05-27T01:19:26.286Z",
    "dateReserved": "2026-05-21T01:21:38.154Z",
    "dateUpdated": "2026-05-27T13:50:44.570Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

    CVE-2026-6408 (GCVE-0-2026-6408)

    Vulnerability from cvelistv5 – Published: 2026-04-22 01:46 – Updated: 2026-04-22 12:49
    VLAI
    Title
    Tanium addressed an information disclosure vulnerability in Tanium Server.
    Summary
    Tanium addressed an information disclosure vulnerability in Tanium Server.
    Severity
    2.7 (Low)
    CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N
    SSVC
    Exploitation: none Automatable: no Technical Impact: partial
    CISA Coordinator (v2.0.3)
    CWE
    • CWE-522 - Insufficiently Protected Credentials
    Assigner
    References
    Impacted products
    Vendor Product Version
    Tanium Tanium Server Affected: 7.6.4.0 , < 7.6.4.2185 (custom)
    Affected: 7.7.3.0 , < 7.7.3.8266 (custom)
    Affected: 7.8.2.0 , < 7.8.2.1168 (custom)
    		Create a notification for this product.
    Date Public
    2026-04-22 01:46
    Show details on NVD website
    To clipboard 

    {
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-6408",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-04-22T12:48:18.544819Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-04-22T12:49:39.769Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "Tanium Server",
          "vendor": "Tanium",
          "versions": [
            {
              "lessThan": "7.6.4.2185",
              "status": "affected",
              "version": "7.6.4.0",
              "versionType": "custom"
            },
            {
              "lessThan": "7.7.3.8266",
              "status": "affected",
              "version": "7.7.3.0",
              "versionType": "custom"
            },
            {
              "lessThan": "7.8.2.1168",
              "status": "affected",
              "version": "7.8.2.0",
              "versionType": "custom"
            }
          ]
        }
      ],
      "dateAssigned": "2026-04-15T21:51:17.273Z",
      "datePublic": "2026-04-22T01:46:17.259Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "Tanium addressed an information disclosure vulnerability in Tanium Server."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "baseScore": 2.7,
            "baseSeverity": "LOW",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N",
            "version": "3.1"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-522",
              "description": "Insufficiently Protected Credentials",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-04-22T01:46:40.653Z",
        "orgId": "3938794e-25f5-4123-a1ba-5cbd7f104512",
        "shortName": "Tanium"
      },
      "references": [
        {
          "name": "TAN-2026-012",
          "url": "https://security.tanium.com/TAN-2026-012"
        }
      ],
      "title": "Tanium addressed an information disclosure vulnerability in Tanium Server."
    }
  },
  "cveMetadata": {
    "assignerOrgId": "3938794e-25f5-4123-a1ba-5cbd7f104512",
    "assignerShortName": "Tanium",
    "cveId": "CVE-2026-6408",
    "datePublished": "2026-04-22T01:46:40.653Z",
    "dateReserved": "2026-04-15T21:51:17.871Z",
    "dateUpdated": "2026-04-22T12:49:39.769Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

    CVE-2026-6392 (GCVE-0-2026-6392)

    Vulnerability from cvelistv5 – Published: 2026-04-22 01:46 – Updated: 2026-04-22 12:54
    VLAI
    Title
    Tanium addressed an information disclosure vulnerability in Threat Response.
    Summary
    Tanium addressed an information disclosure vulnerability in Threat Response.
    Severity
    2.7 (Low)
    CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N
    SSVC
    Exploitation: none Automatable: no Technical Impact: partial
    CISA Coordinator (v2.0.3)
    CWE
    • CWE-200 - Exposure of Sensitive Information to an Unauthorized Actor
    Assigner
    References
    Impacted products
    Vendor Product Version
    Tanium Threat Response Affected: 4.6.0 , < 4.6.577 (custom)
    Affected: 4.9.0 , < 4.9.379 (custom)
    		Create a notification for this product.
    Date Public
    2026-04-22 01:46
    Show details on NVD website
    To clipboard 

    {
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-6392",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-04-22T12:54:38.845263Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-04-22T12:54:52.343Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "Threat Response",
          "vendor": "Tanium",
          "versions": [
            {
              "lessThan": "4.6.577",
              "status": "affected",
              "version": "4.6.0",
              "versionType": "custom"
            },
            {
              "lessThan": "4.9.379",
              "status": "affected",
              "version": "4.9.0",
              "versionType": "custom"
            }
          ]
        }
      ],
      "dateAssigned": "2026-04-15T20:04:30.169Z",
      "datePublic": "2026-04-22T01:46:13.287Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "Tanium addressed an information disclosure vulnerability in Threat Response."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "baseScore": 2.7,
            "baseSeverity": "LOW",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N",
            "version": "3.1"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-200",
              "description": "Exposure of Sensitive Information to an Unauthorized Actor",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-04-22T01:46:29.651Z",
        "orgId": "3938794e-25f5-4123-a1ba-5cbd7f104512",
        "shortName": "Tanium"
      },
      "references": [
        {
          "name": "TAN-2026-011",
          "url": "https://security.tanium.com/TAN-2026-011"
        }
      ],
      "title": "Tanium addressed an information disclosure vulnerability in Threat Response."
    }
  },
  "cveMetadata": {
    "assignerOrgId": "3938794e-25f5-4123-a1ba-5cbd7f104512",
    "assignerShortName": "Tanium",
    "cveId": "CVE-2026-6392",
    "datePublished": "2026-04-22T01:46:29.651Z",
    "dateReserved": "2026-04-15T20:04:30.751Z",
    "dateUpdated": "2026-04-22T12:54:52.343Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

    CVE-2026-6416 (GCVE-0-2026-6416)

    Vulnerability from cvelistv5 – Published: 2026-04-22 01:46 – Updated: 2026-04-22 12:57
    VLAI
    Title
    Tanium addressed an uncontrolled resource consumption vulnerability in Interact.
    Summary
    Tanium addressed an uncontrolled resource consumption vulnerability in Interact.
    Severity
    2.7 (Low)
    CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:L
    SSVC
    Exploitation: none Automatable: no Technical Impact: partial
    CISA Coordinator (v2.0.3)
    CWE
    • CWE-400 - Uncontrolled Resource Consumption
    Assigner
    References
    Impacted products
    Vendor Product Version
    Tanium Interact Affected: 3.2.0 , < 3.2.202 (custom)
    Affected: 3.5.0 , < 3.5.108 (custom)
    Affected: 3.8.0 , < 3.8.47 (custom)
        cpe:2.3:a:tanium:service_interact:3.2.196:*:*:*:*:*:*:*
        cpe:2.3:a:tanium:service_interact:3.5.102:*:*:*:*:*:*:*
        cpe:2.3:a:tanium:service_interact:3.8.46:*:*:*:*:*:*:*
    		 Create a notification for this product.
    Date Public
    2026-04-22 01:46
    Credits
    Eric Bester
    Show details on NVD website
    To clipboard 

    {
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-6416",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-04-22T12:57:48.199961Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-04-22T12:57:59.571Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "cpes": [
            "cpe:2.3:a:tanium:service_interact:3.2.196:*:*:*:*:*:*:*",
            "cpe:2.3:a:tanium:service_interact:3.5.102:*:*:*:*:*:*:*",
            "cpe:2.3:a:tanium:service_interact:3.8.46:*:*:*:*:*:*:*"
          ],
          "product": "Interact",
          "vendor": "Tanium",
          "versions": [
            {
              "lessThan": "3.2.202",
              "status": "affected",
              "version": "3.2.0",
              "versionType": "custom"
            },
            {
              "lessThan": "3.5.108",
              "status": "affected",
              "version": "3.5.0",
              "versionType": "custom"
            },
            {
              "lessThan": "3.8.47",
              "status": "affected",
              "version": "3.8.0",
              "versionType": "custom"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "type": "reporter",
          "value": "Eric Bester"
        }
      ],
      "dateAssigned": "2026-04-15T23:55:39.195Z",
      "datePublic": "2026-04-22T01:46:08.322Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "Tanium addressed an uncontrolled resource consumption vulnerability in Interact."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "baseScore": 2.7,
            "baseSeverity": "LOW",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:L",
            "version": "3.1"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-400",
              "description": "Uncontrolled Resource Consumption",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-04-22T01:46:19.376Z",
        "orgId": "3938794e-25f5-4123-a1ba-5cbd7f104512",
        "shortName": "Tanium"
      },
      "references": [
        {
          "name": "TAN-2026-010",
          "url": "https://security.tanium.com/TAN-2026-010"
        }
      ],
      "title": "Tanium addressed an uncontrolled resource consumption vulnerability in Interact."
    }
  },
  "cveMetadata": {
    "assignerOrgId": "3938794e-25f5-4123-a1ba-5cbd7f104512",
    "assignerShortName": "Tanium",
    "cveId": "CVE-2026-6416",
    "datePublished": "2026-04-22T01:46:19.376Z",
    "dateReserved": "2026-04-15T23:55:39.808Z",
    "dateUpdated": "2026-04-22T12:57:59.571Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

    CVE-2026-2350 (GCVE-0-2026-2350)

    Vulnerability from cvelistv5 – Published: 2026-02-19 23:10 – Updated: 2026-03-02 15:50
    VLAI
    Title
    Tanium addressed an insertion of sensitive information into log file vulnerability in Interact and TDS.
    Summary
    Tanium addressed an insertion of sensitive information into log file vulnerability in Interact and TDS.
    Severity
    6.5 (Medium)
    CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
    SSVC
    Exploitation: none Automatable: no Technical Impact: partial
    CISA Coordinator (v2.0.3)
    CWE
    • CWE-532 - Insertion of Sensitive Information into Log File
    Assigner
    References
    Impacted products
    Vendor Product Version
    Tanium Interact Affected: 3.2.0 , < 3.2.196 (custom)
    Affected: 3.5.0 , < 3.5.102 (custom)
        cpe:2.3:a:tanium:service_interact:3.2.195:*:*:*:*:*:*:*
        cpe:2.3:a:tanium:service_interact:3.5.101:*:*:*:*:*:*:*
    		 Create a notification for this product.
    Tanium TDS Affected: 4.1.0 , < 4.1.257 (custom)
        cpe:2.3:a:tanium:service_tds:4.1.256:*:*:*:*:*:*:*
    		 Create a notification for this product.
    Date Public
    2026-02-19 23:10
    Show details on NVD website
    To clipboard 

    {
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-2350",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-03-02T15:41:02.790036Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-03-02T15:50:27.043Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "cpes": [
            "cpe:2.3:a:tanium:service_interact:3.2.195:*:*:*:*:*:*:*",
            "cpe:2.3:a:tanium:service_interact:3.5.101:*:*:*:*:*:*:*"
          ],
          "product": "Interact",
          "vendor": "Tanium",
          "versions": [
            {
              "lessThan": "3.2.196",
              "status": "affected",
              "version": "3.2.0",
              "versionType": "custom"
            },
            {
              "lessThan": "3.5.102",
              "status": "affected",
              "version": "3.5.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "cpes": [
            "cpe:2.3:a:tanium:service_tds:4.1.256:*:*:*:*:*:*:*"
          ],
          "product": "TDS",
          "vendor": "Tanium",
          "versions": [
            {
              "lessThan": "4.1.257",
              "status": "affected",
              "version": "4.1.0",
              "versionType": "custom"
            }
          ]
        }
      ],
      "dateAssigned": "2026-02-11T16:04:36.295Z",
      "datePublic": "2026-02-19T23:10:05.500Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "Tanium addressed an insertion of sensitive information into log file vulnerability in Interact and TDS."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "version": "3.1"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-532",
              "description": "Insertion of Sensitive Information into Log File",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-02-19T23:14:23.480Z",
        "orgId": "3938794e-25f5-4123-a1ba-5cbd7f104512",
        "shortName": "Tanium"
      },
      "references": [
        {
          "name": "TAN-2026-008",
          "url": "https://security.tanium.com/TAN-2026-008"
        }
      ],
      "title": "Tanium addressed an insertion of sensitive information into log file vulnerability in Interact and TDS."
    }
  },
  "cveMetadata": {
    "assignerOrgId": "3938794e-25f5-4123-a1ba-5cbd7f104512",
    "assignerShortName": "Tanium",
    "cveId": "CVE-2026-2350",
    "datePublished": "2026-02-19T23:10:33.951Z",
    "dateReserved": "2026-02-11T16:04:36.872Z",
    "dateUpdated": "2026-03-02T15:50:27.043Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

    CVE-2026-1292 (GCVE-0-2026-1292)

    Vulnerability from cvelistv5 – Published: 2026-02-19 23:10 – Updated: 2026-03-02 15:50
    VLAI
    Title
    Tanium addressed an insertion of sensitive information into log file vulnerability in Trends.
    Summary
    Tanium addressed an insertion of sensitive information into log file vulnerability in Trends.
    Severity
    6.5 (Medium)
    CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
    SSVC
    Exploitation: none Automatable: no Technical Impact: partial
    CISA Coordinator (v2.0.3)
    CWE
    • CWE-532 - Insertion of Sensitive Information into Log File
    Assigner
    References
    Impacted products
    Vendor Product Version
    Tanium Trends Affected: 3.10.0 , < 3.10.20 (custom)
    Affected: 3.11.0 , < 3.11.79 (custom)
        cpe:2.3:a:tanium:service_trends:3.10.19:*:*:*:*:*:*:*
        cpe:2.3:a:tanium:service_trends:3.11.77:*:*:*:*:*:*:*
    		 Create a notification for this product.
    Date Public
    2026-02-19 23:09
    Show details on NVD website
    To clipboard 

    {
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-1292",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-03-02T15:50:37.988052Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-03-02T15:50:54.033Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "cpes": [
            "cpe:2.3:a:tanium:service_trends:3.10.19:*:*:*:*:*:*:*",
            "cpe:2.3:a:tanium:service_trends:3.11.77:*:*:*:*:*:*:*"
          ],
          "product": "Trends",
          "vendor": "Tanium",
          "versions": [
            {
              "lessThan": "3.10.20",
              "status": "affected",
              "version": "3.10.0",
              "versionType": "custom"
            },
            {
              "lessThan": "3.11.79",
              "status": "affected",
              "version": "3.11.0",
              "versionType": "custom"
            }
          ]
        }
      ],
      "dateAssigned": "2026-01-21T16:30:45.079Z",
      "datePublic": "2026-02-19T23:09:55.630Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "Tanium addressed an insertion of sensitive information into log file vulnerability in Trends."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "version": "3.1"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-532",
              "description": "Insertion of Sensitive Information into Log File",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-02-19T23:10:23.372Z",
        "orgId": "3938794e-25f5-4123-a1ba-5cbd7f104512",
        "shortName": "Tanium"
      },
      "references": [
        {
          "name": "TAN-2026-007",
          "url": "https://security.tanium.com/TAN-2026-007"
        }
      ],
      "title": "Tanium addressed an insertion of sensitive information into log file vulnerability in Trends."
    }
  },
  "cveMetadata": {
    "assignerOrgId": "3938794e-25f5-4123-a1ba-5cbd7f104512",
    "assignerShortName": "Tanium",
    "cveId": "CVE-2026-1292",
    "datePublished": "2026-02-19T23:10:23.372Z",
    "dateReserved": "2026-01-21T16:30:45.783Z",
    "dateUpdated": "2026-03-02T15:50:54.033Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

    CVE-2026-2605 (GCVE-0-2026-2605)

    Vulnerability from cvelistv5 – Published: 2026-02-19 23:10 – Updated: 2026-03-02 15:51
    VLAI
    Title
    Tanium addressed an insertion of sensitive information into log file vulnerability in TanOS.
    Summary
    Tanium addressed an insertion of sensitive information into log file vulnerability in TanOS.
    Severity
    5.3 (Medium)
    CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N
    SSVC
    Exploitation: none Automatable: no Technical Impact: partial
    CISA Coordinator (v2.0.3)
    CWE
    • CWE-532 - Insertion of Sensitive Information into Log File
    Assigner
    References
    Impacted products
    Vendor Product Version
    Tanium TanOS Affected: 1.8.4 , < 1.8.4.0249 (custom)
    Affected: 1.8.5 , < 1.8.5.0282 (custom)
    Affected: 1.8.6 , < 1.8.6.0150 (custom)
        cpe:2.3:a:tanium:tanos:1.8.4.0249:*:*:*:*:*:*:*
        cpe:2.3:a:tanium:tanos:1.8.5.0282:*:*:*:*:*:*:*
        cpe:2.3:a:tanium:tanos:1.8.6.0150:*:*:*:*:*:*:*
    		 Create a notification for this product.
    Date Public
    2026-02-19 23:09
    Show details on NVD website
    To clipboard 

    {
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-2605",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-03-02T15:51:21.997907Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-03-02T15:51:41.710Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "cpes": [
            "cpe:2.3:a:tanium:tanos:1.8.4.0249:*:*:*:*:*:*:*",
            "cpe:2.3:a:tanium:tanos:1.8.5.0282:*:*:*:*:*:*:*",
            "cpe:2.3:a:tanium:tanos:1.8.6.0150:*:*:*:*:*:*:*"
          ],
          "product": "TanOS",
          "vendor": "Tanium",
          "versions": [
            {
              "lessThan": "1.8.4.0249",
              "status": "affected",
              "version": "1.8.4",
              "versionType": "custom"
            },
            {
              "lessThan": "1.8.5.0282",
              "status": "affected",
              "version": "1.8.5",
              "versionType": "custom"
            },
            {
              "lessThan": "1.8.6.0150",
              "status": "affected",
              "version": "1.8.6",
              "versionType": "custom"
            }
          ]
        }
      ],
      "dateAssigned": "2026-02-16T21:37:14.785Z",
      "datePublic": "2026-02-19T23:09:49.159Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "Tanium addressed an insertion of sensitive information into log file vulnerability in TanOS."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "baseScore": 5.3,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "version": "3.1"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-532",
              "description": "Insertion of Sensitive Information into Log File",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-02-19T23:13:38.465Z",
        "orgId": "3938794e-25f5-4123-a1ba-5cbd7f104512",
        "shortName": "Tanium"
      },
      "references": [
        {
          "name": "TAN-2026-006",
          "url": "https://security.tanium.com/TAN-2026-006"
        }
      ],
      "title": "Tanium addressed an insertion of sensitive information into log file vulnerability in TanOS."
    }
  },
  "cveMetadata": {
    "assignerOrgId": "3938794e-25f5-4123-a1ba-5cbd7f104512",
    "assignerShortName": "Tanium",
    "cveId": "CVE-2026-2605",
    "datePublished": "2026-02-19T23:10:02.867Z",
    "dateReserved": "2026-02-16T21:37:15.555Z",
    "dateUpdated": "2026-03-02T15:51:41.710Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

    CVE-2026-2408 (GCVE-0-2026-2408)

    Vulnerability from cvelistv5 – Published: 2026-02-19 23:09 – Updated: 2026-03-02 15:55
    VLAI
    Title
    Use-after-free in Cloud Workloads
    Summary
    Tanium addressed a use-after-free vulnerability in the Cloud Workloads Enforce client extension.
    Severity
    4.7 (Medium)
    CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H
    SSVC
    Exploitation: none Automatable: no Technical Impact: partial
    CISA Coordinator (v2.0.3)
    CWE
    Assigner
    References
    Impacted products
    Vendor Product Version
    Tanium Cloud Workloads Affected: 1.0.222 , < 1.0.222 (custom)
        cpe:2.3:a:tanium:service_cloudworkloads:1.0.221:*:*:*:*:*:*:*
    		 Create a notification for this product.
    Date Public
    2026-02-19 23:09
    Show details on NVD website
    To clipboard 

    {
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-2408",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-03-02T15:54:55.216169Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-03-02T15:55:09.813Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "cpes": [
            "cpe:2.3:a:tanium:service_cloudworkloads:1.0.221:*:*:*:*:*:*:*"
          ],
          "product": "Cloud Workloads",
          "vendor": "Tanium",
          "versions": [
            {
              "lessThan": "1.0.222",
              "status": "affected",
              "version": "1.0.222",
              "versionType": "custom"
            }
          ]
        }
      ],
      "dateAssigned": "2026-02-12T13:49:48.721Z",
      "datePublic": "2026-02-19T23:09:40.352Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "Tanium addressed a use-after-free vulnerability in the Cloud Workloads Enforce client extension."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "baseScore": 4.7,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-416",
              "description": "Use After Free",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-02-19T23:09:51.620Z",
        "orgId": "3938794e-25f5-4123-a1ba-5cbd7f104512",
        "shortName": "Tanium"
      },
      "references": [
        {
          "name": "TAN-2026-005",
          "url": "https://security.tanium.com/TAN-2026-005"
        }
      ],
      "title": "Use-after-free in Cloud Workloads"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "3938794e-25f5-4123-a1ba-5cbd7f104512",
    "assignerShortName": "Tanium",
    "cveId": "CVE-2026-2408",
    "datePublished": "2026-02-19T23:09:51.620Z",
    "dateReserved": "2026-02-12T13:49:49.307Z",
    "dateUpdated": "2026-03-02T15:55:09.813Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

    CVE-2026-2435 (GCVE-0-2026-2435)

    Vulnerability from cvelistv5 – Published: 2026-02-19 23:09 – Updated: 2026-03-02 15:55
    VLAI
    Title
    ASSET-7706
    Summary
    Tanium addressed a SQL injection vulnerability in Asset.
    Severity
    6.3 (Medium)
    CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L
    SSVC
    Exploitation: none Automatable: no Technical Impact: partial
    CISA Coordinator (v2.0.3)
    CWE
    • CWE-89 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
    Assigner
    References
    Impacted products
    Vendor Product Version
    Tanium Asset Affected: 1.32 , < 1.32.179 (custom)
    Affected: 1.33 , < 1.33.269 (custom)
    Affected: 1.36 , < 1.36.108 (custom)
        cpe:2.3:a:tanium:service_asset:1.32.178:*:*:*:*:*:*:*
        cpe:2.3:a:tanium:service_asset:1.33.268:*:*:*:*:*:*:*
        cpe:2.3:a:tanium:service_asset:1.36.107:*:*:*:*:*:*:*
    		 Create a notification for this product.
    Date Public
    2026-02-19 23:09
    Show details on NVD website
    To clipboard 

    {
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-2435",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-03-02T15:55:19.435641Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-03-02T15:55:43.064Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "cpes": [
            "cpe:2.3:a:tanium:service_asset:1.32.178:*:*:*:*:*:*:*",
            "cpe:2.3:a:tanium:service_asset:1.33.268:*:*:*:*:*:*:*",
            "cpe:2.3:a:tanium:service_asset:1.36.107:*:*:*:*:*:*:*"
          ],
          "product": "Asset",
          "vendor": "Tanium",
          "versions": [
            {
              "lessThan": "1.32.179",
              "status": "affected",
              "version": "1.32",
              "versionType": "custom"
            },
            {
              "lessThan": "1.33.269",
              "status": "affected",
              "version": "1.33",
              "versionType": "custom"
            },
            {
              "lessThan": "1.36.108",
              "status": "affected",
              "version": "1.36",
              "versionType": "custom"
            }
          ]
        }
      ],
      "dateAssigned": "2026-02-12T22:26:04.213Z",
      "datePublic": "2026-02-19T23:09:30.641Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "Tanium addressed a SQL injection vulnerability in Asset."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "baseScore": 6.3,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "version": "3.1"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-89",
              "description": "Improper Neutralization of Special Elements used in an SQL Command (\u0027SQL Injection\u0027)",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-02-19T23:09:41.110Z",
        "orgId": "3938794e-25f5-4123-a1ba-5cbd7f104512",
        "shortName": "Tanium"
      },
      "references": [
        {
          "name": "TAN-2026-004",
          "url": "https://security.tanium.com/TAN-2026-004"
        }
      ],
      "title": "ASSET-7706"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "3938794e-25f5-4123-a1ba-5cbd7f104512",
    "assignerShortName": "Tanium",
    "cveId": "CVE-2026-2435",
    "datePublished": "2026-02-19T23:09:41.110Z",
    "dateReserved": "2026-02-12T22:26:04.828Z",
    "dateUpdated": "2026-03-02T15:55:43.064Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}