Refine your search
1 vulnerability found for Health Check by Tanium
CVE-2026-121565 (GCVE-0-2026-121565)
Vulnerability from cvelistv5
Published
2026-11-03 22:17
Modified
2026-11-06 19:26
Severity ?
VLAI Severity ?
EPSS score ?
CWE
- CWE-295 - Improper Certificate Validation
Summary
Tanium addressed an improper certificate validation vulnerability in multiple products. Products have been updated to distrust several intermediate CA certificates associated with compromised private keys.
References
Impacted products
| Vendor | Product | Version | ||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| Tanium | TanOS |
Version: 1.8.5 < 1.8.5.0326 Version: 1.8.6 < 1.8.6.0193 Version: 1.9.0 < 1.9.0.0089 |
||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
|
||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2026-121565",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "total"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-11-06T19:26:46.759376Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2026-11-06T19:26:57.322Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"product": "TanOS",
"vendor": "Tanium",
"versions": [
{
"lessThan": "1.8.5.0326",
"status": "affected",
"version": "1.8.5",
"versionType": "custom"
},
{
"lessThan": "1.8.6.0193",
"status": "affected",
"version": "1.8.6",
"versionType": "custom"
},
{
"lessThan": "1.9.0.0089",
"status": "affected",
"version": "1.9.0",
"versionType": "custom"
}
]
},
{
"product": "Asset",
"vendor": "Tanium",
"versions": [
{
"lessThan": "1.33.334",
"status": "affected",
"version": "1.33",
"versionType": "custom"
},
{
"lessThan": "1.36.182",
"status": "affected",
"version": "1.36",
"versionType": "custom"
},
{
"lessThan": "1.39.164",
"status": "affected",
"version": "1.39",
"versionType": "custom"
}
]
},
{
"product": "Comply",
"vendor": "Tanium",
"versions": [
{
"lessThan": "2.32.275",
"status": "affected",
"version": "2.32",
"versionType": "custom"
},
{
"lessThan": "2.35.337",
"status": "affected",
"version": "2.35",
"versionType": "custom"
},
{
"lessThan": "2.37.347",
"status": "affected",
"version": "2.37",
"versionType": "custom"
}
]
},
{
"product": "Connect",
"vendor": "Tanium",
"versions": [
{
"lessThan": "5.29.272",
"status": "affected",
"version": "5.29",
"versionType": "custom"
},
{
"lessThan": "5.37.177",
"status": "affected",
"version": "5.37",
"versionType": "custom"
},
{
"lessThan": "5.47.135",
"status": "affected",
"version": "5.47",
"versionType": "custom"
}
]
},
{
"product": "Integrity Monitor",
"vendor": "Tanium",
"versions": [
{
"lessThan": "3.6.608",
"status": "affected",
"version": "3.6",
"versionType": "custom"
},
{
"lessThan": "3.7.383",
"status": "affected",
"version": "3.7",
"versionType": "custom"
},
{
"lessThan": "3.8.362",
"status": "affected",
"version": "3.8",
"versionType": "custom"
}
]
},
{
"product": "Health Check",
"vendor": "Tanium",
"versions": [
{
"lessThan": "1.13.653",
"status": "affected",
"version": "1.13",
"versionType": "custom"
}
]
},
{
"product": "Endpoint Configuration Toolset Solution",
"vendor": "Tanium",
"versions": [
{
"lessThan": "1.51.61",
"status": "affected",
"version": "1.51",
"versionType": "custom"
},
{
"lessThan": "1.59.51",
"status": "affected",
"version": "1.59",
"versionType": "custom"
},
{
"lessThan": "1.71.26",
"status": "affected",
"version": "1.71",
"versionType": "custom"
}
]
},
{
"product": "Patch",
"vendor": "Tanium",
"versions": [
{
"lessThan": "3.24.328",
"status": "affected",
"version": "3.24",
"versionType": "custom"
},
{
"lessThan": "3.28.346",
"status": "affected",
"version": "3.28",
"versionType": "custom"
},
{
"lessThan": "3.32.383",
"status": "affected",
"version": "3.32",
"versionType": "custom"
}
]
},
{
"product": "Performance",
"vendor": "Tanium",
"versions": [
{
"lessThan": "1.25.196",
"status": "affected",
"version": "1.25",
"versionType": "custom"
}
]
},
{
"product": "Reputation",
"vendor": "Tanium",
"versions": [
{
"lessThan": "6.6.150",
"status": "affected",
"version": "6.6",
"versionType": "custom"
},
{
"lessThan": "6.7.143",
"status": "affected",
"version": "6.7",
"versionType": "custom"
},
{
"lessThan": "6.8.167",
"status": "affected",
"version": "6.8",
"versionType": "custom"
}
]
},
{
"product": "Reveal",
"vendor": "Tanium",
"versions": [
{
"lessThan": "2.4.109",
"status": "affected",
"version": "2.4",
"versionType": "custom"
},
{
"lessThan": "2.5.166",
"status": "affected",
"version": "2.5",
"versionType": "custom"
}
]
},
{
"product": "Threat Response",
"vendor": "Tanium",
"versions": [
{
"lessThan": "4.9.480",
"status": "affected",
"version": "4.9",
"versionType": "custom"
},
{
"lessThan": "4.12.353",
"status": "affected",
"version": "4.12",
"versionType": "custom"
},
{
"lessThan": "4.17.333",
"status": "affected",
"version": "4.17",
"versionType": "custom"
}
]
},
{
"product": "Provision Host",
"vendor": "Tanium",
"versions": [
{
"lessThan": "10.4.100",
"status": "affected",
"version": "10.4.100",
"versionType": "semver"
},
{
"lessThan": "10.8.115",
"status": "affected",
"version": "10.8.115",
"versionType": "semver"
},
{
"lessThan": "10.9.113",
"status": "affected",
"version": "10.9.113",
"versionType": "semver"
},
{
"lessThan": "10.10.189",
"status": "affected",
"version": "10.10.189",
"versionType": "semver"
},
{
"lessThan": "10.11.127",
"status": "affected",
"version": "10.11.127",
"versionType": "semver"
}
]
}
],
"dateAssigned": "2026-11-03T14:58:46.819Z",
"datePublic": "2026-11-03T22:12:11.458Z",
"descriptions": [
{
"lang": "en",
"value": "Tanium addressed an improper certificate validation vulnerability in multiple products. Products have been updated to distrust several intermediate CA certificates associated with compromised private keys."
}
],
"metrics": [
{
"cvssV3_1": {
"baseScore": 7.4,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N",
"version": "3.1"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-295",
"description": "Improper Certificate Validation",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-11-04T11:24:05.622Z",
"orgId": "3938794e-25f5-4123-a1ba-5cbd7f104512",
"shortName": "Tanium"
},
"references": [
{
"name": "TAN-2026-092",
"url": "https://security.tanium.com/TAN-2026-092"
}
],
"title": "Tanium addressed an improper certificate validation vulnerability in multiple products"
}
},
"cveMetadata": {
"assignerOrgId": "3938794e-25f5-4123-a1ba-5cbd7f104512",
"assignerShortName": "Tanium",
"cveId": "CVE-2026-121565",
"datePublished": "2026-11-03T22:17:22.997Z",
"dateReserved": "2026-11-03T14:58:47.328Z",
"dateUpdated": "2026-11-06T19:26:57.322Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}