Refine your search
117 vulnerabilities found for by Tanium
CVE-2026-108311 (GCVE-0-2026-108311)
Vulnerability from cvelistv5
Published
2026-10-27 17:35
Modified
2026-10-27 17:35
Severity ?
VLAI Severity ?
EPSS score ?
CWE
- CWE-778 - Insufficient Logging
Summary
Tanium addressed an insufficient logging vulnerability in Tanium Server.
References
Impacted products
| Vendor | Product | Version | ||
|---|---|---|---|---|
| Tanium | Tanium Server |
Version: 7.7.3 < 7.7.3.8351 Version: 7.8.2 < 7.8.2.1263 Version: 7.8.4 < 7.8.4.1399 |
{
"containers": {
"cna": {
"affected": [
{
"product": "Tanium Server",
"vendor": "Tanium",
"versions": [
{
"lessThan": "7.7.3.8351",
"status": "affected",
"version": "7.7.3",
"versionType": "custom"
},
{
"lessThan": "7.8.2.1263",
"status": "affected",
"version": "7.8.2",
"versionType": "custom"
},
{
"lessThan": "7.8.4.1399",
"status": "affected",
"version": "7.8.4",
"versionType": "custom"
}
]
}
],
"dateAssigned": "2026-10-09T19:21:27.250Z",
"datePublic": "2026-10-27T17:26:23.611Z",
"descriptions": [
{
"lang": "en",
"value": "Tanium addressed an insufficient logging vulnerability in Tanium Server."
}
],
"metrics": [
{
"cvssV3_1": {
"baseScore": 2.7,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:N",
"version": "3.1"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-778",
"description": "Insufficient Logging",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-10-27T17:35:43.548Z",
"orgId": "3938794e-25f5-4123-a1ba-5cbd7f104512",
"shortName": "Tanium"
},
"references": [
{
"name": "TAN-2026-078",
"url": "https://security.tanium.com/TAN-2026-078"
}
],
"title": "Tanium addressed an insufficient logging vulnerability in Tanium Server."
}
},
"cveMetadata": {
"assignerOrgId": "3938794e-25f5-4123-a1ba-5cbd7f104512",
"assignerShortName": "Tanium",
"cveId": "CVE-2026-108311",
"datePublished": "2026-10-27T17:35:43.548Z",
"dateReserved": "2026-10-09T19:21:27.383Z",
"dateUpdated": "2026-10-27T17:35:43.548Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-108303 (GCVE-0-2026-108303)
Vulnerability from cvelistv5
Published
2026-10-27 17:35
Modified
2026-10-27 17:35
Severity ?
VLAI Severity ?
EPSS score ?
CWE
- CWE-77 - Improper Neutralization of Special Elements used in a Command ('Command Injection')
Summary
Tanium addressed an unauthorized code execution vulnerability in Certificate Manager.
References
Impacted products
| Vendor | Product | Version | ||
|---|---|---|---|---|
| Tanium | Certificate Manager |
Version: 1.17 < 1.17.417 Version: 1.18 < 1.18.368 Version: 1.22 < 1.22.119 |
{
"containers": {
"cna": {
"affected": [
{
"product": "Certificate Manager",
"vendor": "Tanium",
"versions": [
{
"lessThan": "1.17.417",
"status": "affected",
"version": "1.17",
"versionType": "custom"
},
{
"lessThan": "1.18.368",
"status": "affected",
"version": "1.18",
"versionType": "custom"
},
{
"lessThan": "1.22.119",
"status": "affected",
"version": "1.22",
"versionType": "custom"
}
]
}
],
"dateAssigned": "2026-10-09T19:21:24.393Z",
"datePublic": "2026-10-27T17:26:22.770Z",
"descriptions": [
{
"lang": "en",
"value": "Tanium addressed an unauthorized code execution vulnerability in Certificate Manager."
}
],
"metrics": [
{
"cvssV3_1": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-77",
"description": "Improper Neutralization of Special Elements used in a Command (\u0027Command Injection\u0027)",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-10-27T17:35:43.298Z",
"orgId": "3938794e-25f5-4123-a1ba-5cbd7f104512",
"shortName": "Tanium"
},
"references": [
{
"name": "TAN-2026-075",
"url": "https://security.tanium.com/TAN-2026-075"
}
],
"title": "Tanium addressed an unauthorized code execution vulnerability in Certificate Manager."
}
},
"cveMetadata": {
"assignerOrgId": "3938794e-25f5-4123-a1ba-5cbd7f104512",
"assignerShortName": "Tanium",
"cveId": "CVE-2026-108303",
"datePublished": "2026-10-27T17:35:43.298Z",
"dateReserved": "2026-10-09T19:21:24.565Z",
"dateUpdated": "2026-10-27T17:35:43.298Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-108316 (GCVE-0-2026-108316)
Vulnerability from cvelistv5
Published
2026-10-27 17:35
Modified
2026-10-27 17:35
Severity ?
VLAI Severity ?
EPSS score ?
CWE
- CWE-209 - Generation of Error Message Containing Sensitive Information
Summary
Tanium addressed an information disclosure vulnerability in Tanium Server.
References
Impacted products
| Vendor | Product | Version | ||
|---|---|---|---|---|
| Tanium | Tanium Server |
Version: 7.7.3 < 7.7.3.8351 Version: 7.8.2 < 7.8.2.1263 Version: 7.8.4 < 7.8.4.1399 |
{
"containers": {
"cna": {
"affected": [
{
"product": "Tanium Server",
"vendor": "Tanium",
"versions": [
{
"lessThan": "7.7.3.8351",
"status": "affected",
"version": "7.7.3",
"versionType": "custom"
},
{
"lessThan": "7.8.2.1263",
"status": "affected",
"version": "7.8.2",
"versionType": "custom"
},
{
"lessThan": "7.8.4.1399",
"status": "affected",
"version": "7.8.4",
"versionType": "custom"
}
]
}
],
"dateAssigned": "2026-10-09T19:21:29.009Z",
"datePublic": "2026-10-27T17:26:18.635Z",
"descriptions": [
{
"lang": "en",
"value": "Tanium addressed an information disclosure vulnerability in Tanium Server."
}
],
"metrics": [
{
"cvssV3_1": {
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
"version": "3.1"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-209",
"description": "Generation of Error Message Containing Sensitive Information",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-10-27T17:35:43.092Z",
"orgId": "3938794e-25f5-4123-a1ba-5cbd7f104512",
"shortName": "Tanium"
},
"references": [
{
"name": "TAN-2026-062",
"url": "https://security.tanium.com/TAN-2026-062"
}
],
"title": "Tanium addressed an information disclosure vulnerability in Tanium Server."
}
},
"cveMetadata": {
"assignerOrgId": "3938794e-25f5-4123-a1ba-5cbd7f104512",
"assignerShortName": "Tanium",
"cveId": "CVE-2026-108316",
"datePublished": "2026-10-27T17:35:43.092Z",
"dateReserved": "2026-10-09T19:21:29.182Z",
"dateUpdated": "2026-10-27T17:35:43.092Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-116656 (GCVE-0-2026-116656)
Vulnerability from cvelistv5
Published
2026-10-27 17:35
Modified
2026-10-27 17:35
Severity ?
VLAI Severity ?
EPSS score ?
CWE
- CWE-400 - Uncontrolled Resource Consumption
Summary
Tanium addressed an uncontrolled resource consumption vulnerability in Enforce.
References
Impacted products
{
"containers": {
"cna": {
"affected": [
{
"product": "Enforce",
"vendor": "Tanium",
"versions": [
{
"lessThan": "2.9.736",
"status": "affected",
"version": "2.9",
"versionType": "custom"
},
{
"lessThan": "2.10.778",
"status": "affected",
"version": "2.10",
"versionType": "custom"
},
{
"lessThan": "3.0.373",
"status": "affected",
"version": "3.0",
"versionType": "custom"
}
]
}
],
"dateAssigned": "2026-10-26T19:15:06.278Z",
"datePublic": "2026-10-27T17:26:21.394Z",
"descriptions": [
{
"lang": "en",
"value": "Tanium addressed an uncontrolled resource consumption vulnerability in Enforce."
}
],
"metrics": [
{
"cvssV3_1": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-400",
"description": "Uncontrolled Resource Consumption",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-10-27T17:35:42.916Z",
"orgId": "3938794e-25f5-4123-a1ba-5cbd7f104512",
"shortName": "Tanium"
},
"references": [
{
"name": "TAN-2026-071",
"url": "https://security.tanium.com/TAN-2026-071"
}
],
"title": "Tanium addressed an uncontrolled resource consumption vulnerability in Enforce."
}
},
"cveMetadata": {
"assignerOrgId": "3938794e-25f5-4123-a1ba-5cbd7f104512",
"assignerShortName": "Tanium",
"cveId": "CVE-2026-116656",
"datePublished": "2026-10-27T17:35:42.916Z",
"dateReserved": "2026-10-26T19:15:06.430Z",
"dateUpdated": "2026-10-27T17:35:42.916Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-108325 (GCVE-0-2026-108325)
Vulnerability from cvelistv5
Published
2026-10-27 17:35
Modified
2026-10-27 17:35
Severity ?
VLAI Severity ?
EPSS score ?
CWE
- CWE-532 - Insertion of Sensitive Information into Log File
Summary
Tanium addressed an insertion of sensitive information into log file vulnerability in Reputation.
References
Impacted products
| Vendor | Product | Version | ||
|---|---|---|---|---|
| Tanium | Reputation |
Version: 6.6 < 6.6.145 Version: 6.7 < 6.7.138 Version: 6.8 < 6.8.162 |
{
"containers": {
"cna": {
"affected": [
{
"product": "Reputation",
"vendor": "Tanium",
"versions": [
{
"lessThan": "6.6.145",
"status": "affected",
"version": "6.6",
"versionType": "custom"
},
{
"lessThan": "6.7.138",
"status": "affected",
"version": "6.7",
"versionType": "custom"
},
{
"lessThan": "6.8.162",
"status": "affected",
"version": "6.8",
"versionType": "custom"
}
]
}
],
"dateAssigned": "2026-10-09T19:21:32.264Z",
"datePublic": "2026-10-27T17:26:20.299Z",
"descriptions": [
{
"lang": "en",
"value": "Tanium addressed an insertion of sensitive information into log file vulnerability in Reputation."
}
],
"metrics": [
{
"cvssV3_1": {
"baseScore": 6.6,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-532",
"description": "Insertion of Sensitive Information into Log File",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-10-27T17:35:42.735Z",
"orgId": "3938794e-25f5-4123-a1ba-5cbd7f104512",
"shortName": "Tanium"
},
"references": [
{
"name": "TAN-2026-067",
"url": "https://security.tanium.com/TAN-2026-067"
}
],
"title": "Tanium addressed an insertion of sensitive information into log file vulnerability in Reputation."
}
},
"cveMetadata": {
"assignerOrgId": "3938794e-25f5-4123-a1ba-5cbd7f104512",
"assignerShortName": "Tanium",
"cveId": "CVE-2026-108325",
"datePublished": "2026-10-27T17:35:42.735Z",
"dateReserved": "2026-10-09T19:21:32.389Z",
"dateUpdated": "2026-10-27T17:35:42.735Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-116659 (GCVE-0-2026-116659)
Vulnerability from cvelistv5
Published
2026-10-27 17:35
Modified
2026-10-27 17:35
Severity ?
VLAI Severity ?
EPSS score ?
CWE
- CWE-770 - Allocation of Resources Without Limits or Throttling
Summary
Tanium addressed an uncontrolled resource consumption vulnerability in Enforce.
References
Impacted products
{
"containers": {
"cna": {
"affected": [
{
"product": "Enforce",
"vendor": "Tanium",
"versions": [
{
"lessThan": "2.9.736",
"status": "affected",
"version": "2.9",
"versionType": "custom"
},
{
"lessThan": "2.10.778",
"status": "affected",
"version": "2.10",
"versionType": "custom"
},
{
"lessThan": "3.0.373",
"status": "affected",
"version": "3.0",
"versionType": "custom"
}
]
}
],
"dateAssigned": "2026-10-26T19:15:07.480Z",
"datePublic": "2026-10-27T17:26:23.333Z",
"descriptions": [
{
"lang": "en",
"value": "Tanium addressed an uncontrolled resource consumption vulnerability in Enforce."
}
],
"metrics": [
{
"cvssV3_1": {
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L",
"version": "3.1"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-770",
"description": "Allocation of Resources Without Limits or Throttling",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-10-27T17:35:42.543Z",
"orgId": "3938794e-25f5-4123-a1ba-5cbd7f104512",
"shortName": "Tanium"
},
"references": [
{
"name": "TAN-2026-077",
"url": "https://security.tanium.com/TAN-2026-077"
}
],
"title": "Tanium addressed an uncontrolled resource consumption vulnerability in Enforce."
}
},
"cveMetadata": {
"assignerOrgId": "3938794e-25f5-4123-a1ba-5cbd7f104512",
"assignerShortName": "Tanium",
"cveId": "CVE-2026-116659",
"datePublished": "2026-10-27T17:35:42.543Z",
"dateReserved": "2026-10-26T19:15:07.631Z",
"dateUpdated": "2026-10-27T17:35:42.543Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-108302 (GCVE-0-2026-108302)
Vulnerability from cvelistv5
Published
2026-10-27 17:35
Modified
2026-10-27 17:35
Severity ?
VLAI Severity ?
EPSS score ?
CWE
- CWE-863 - Incorrect Authorization
Summary
Tanium addressed an improper access controls vulnerability in Comply.
References
Impacted products
{
"containers": {
"cna": {
"affected": [
{
"product": "Comply",
"vendor": "Tanium",
"versions": [
{
"lessThan": "2.32.263",
"status": "affected",
"version": "2.32",
"versionType": "custom"
},
{
"lessThan": "2.35.323",
"status": "affected",
"version": "2.35",
"versionType": "custom"
},
{
"lessThan": "2.37.326",
"status": "affected",
"version": "2.37",
"versionType": "custom"
}
]
}
],
"dateAssigned": "2026-10-09T19:21:24.023Z",
"datePublic": "2026-10-27T17:26:21.956Z",
"descriptions": [
{
"lang": "en",
"value": "Tanium addressed an improper access controls vulnerability in Comply."
}
],
"metrics": [
{
"cvssV3_1": {
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
"version": "3.1"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-863",
"description": "Incorrect Authorization",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-10-27T17:35:42.350Z",
"orgId": "3938794e-25f5-4123-a1ba-5cbd7f104512",
"shortName": "Tanium"
},
"references": [
{
"name": "TAN-2026-073",
"url": "https://security.tanium.com/TAN-2026-073"
}
],
"title": "Tanium addressed an improper access controls vulnerability in Comply."
}
},
"cveMetadata": {
"assignerOrgId": "3938794e-25f5-4123-a1ba-5cbd7f104512",
"assignerShortName": "Tanium",
"cveId": "CVE-2026-108302",
"datePublished": "2026-10-27T17:35:42.350Z",
"dateReserved": "2026-10-09T19:21:24.198Z",
"dateUpdated": "2026-10-27T17:35:42.350Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-108306 (GCVE-0-2026-108306)
Vulnerability from cvelistv5
Published
2026-10-27 17:35
Modified
2026-10-27 17:35
Severity ?
VLAI Severity ?
EPSS score ?
CWE
- CWE-59 - Improper Link Resolution Before File Access ('Link Following')
Summary
Tanium addressed a local privilege escalation vulnerability in End-User Notifications.
References
Impacted products
| Vendor | Product | Version | |||||||
|---|---|---|---|---|---|---|---|---|---|
| Tanium | Endpoint Configuration Toolset Solution |
Version: 1.51 < 1.51.60 Version: 1.59 < 1.59.50 Version: 1.71 < 1.71.25 |
|||||||
|
|||||||||
{
"containers": {
"cna": {
"affected": [
{
"product": "Endpoint Configuration Toolset Solution",
"vendor": "Tanium",
"versions": [
{
"lessThan": "1.51.60",
"status": "affected",
"version": "1.51",
"versionType": "custom"
},
{
"lessThan": "1.59.50",
"status": "affected",
"version": "1.59",
"versionType": "custom"
},
{
"lessThan": "1.71.25",
"status": "affected",
"version": "1.71",
"versionType": "custom"
}
]
},
{
"product": "end-user-cx",
"vendor": "Tanium",
"versions": [
{
"lessThan": "1.8.47",
"status": "affected",
"version": "1.8.47",
"versionType": "semver"
},
{
"lessThan": "1.11.605",
"status": "affected",
"version": "1.11.605",
"versionType": "semver"
},
{
"lessThan": "1.19.325",
"status": "affected",
"version": "1.19.325",
"versionType": "semver"
},
{
"lessThan": "1.21.835",
"status": "affected",
"version": "1.21.835",
"versionType": "semver"
},
{
"lessThan": "1.22.1199",
"status": "affected",
"version": "1.22.1199",
"versionType": "semver"
},
{
"lessThan": "1.23.766",
"status": "affected",
"version": "1.23.766",
"versionType": "semver"
},
{
"lessThan": "1.24.590",
"status": "affected",
"version": "1.24.590",
"versionType": "semver"
}
]
}
],
"dateAssigned": "2026-10-09T19:21:25.468Z",
"datePublic": "2026-10-27T17:26:19.759Z",
"descriptions": [
{
"lang": "en",
"value": "Tanium addressed a local privilege escalation vulnerability in End-User Notifications."
}
],
"metrics": [
{
"cvssV3_1": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-59",
"description": "Improper Link Resolution Before File Access (\u0027Link Following\u0027)",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-10-27T17:35:42.154Z",
"orgId": "3938794e-25f5-4123-a1ba-5cbd7f104512",
"shortName": "Tanium"
},
"references": [
{
"name": "TAN-2026-065",
"url": "https://security.tanium.com/TAN-2026-065"
}
],
"title": "Tanium addressed a local privilege escalation vulnerability in End-User Notifications."
}
},
"cveMetadata": {
"assignerOrgId": "3938794e-25f5-4123-a1ba-5cbd7f104512",
"assignerShortName": "Tanium",
"cveId": "CVE-2026-108306",
"datePublished": "2026-10-27T17:35:42.154Z",
"dateReserved": "2026-10-09T19:21:25.635Z",
"dateUpdated": "2026-10-27T17:35:42.154Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-108329 (GCVE-0-2026-108329)
Vulnerability from cvelistv5
Published
2026-10-27 17:35
Modified
2026-10-27 17:35
Severity ?
VLAI Severity ?
EPSS score ?
CWE
- CWE-77 - Improper Neutralization of Special Elements used in a Command ('Command Injection')
Summary
Tanium addressed an unauthorized code execution vulnerability in Threat Response.
References
Impacted products
| Vendor | Product | Version | ||
|---|---|---|---|---|
| Tanium | Threat Response |
Version: 4.9 < 4.9.476 Version: 4.12 < 4.12.349 Version: 4.17 < 4.17.327 |
{
"containers": {
"cna": {
"affected": [
{
"product": "Threat Response",
"vendor": "Tanium",
"versions": [
{
"lessThan": "4.9.476",
"status": "affected",
"version": "4.9",
"versionType": "custom"
},
{
"lessThan": "4.12.349",
"status": "affected",
"version": "4.12",
"versionType": "custom"
},
{
"lessThan": "4.17.327",
"status": "affected",
"version": "4.17",
"versionType": "custom"
}
]
}
],
"dateAssigned": "2026-10-09T19:21:33.643Z",
"datePublic": "2026-10-27T17:26:19.471Z",
"descriptions": [
{
"lang": "en",
"value": "Tanium addressed an unauthorized code execution vulnerability in Threat Response."
}
],
"metrics": [
{
"cvssV3_1": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-77",
"description": "Improper Neutralization of Special Elements used in a Command (\u0027Command Injection\u0027)",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-10-27T17:35:41.970Z",
"orgId": "3938794e-25f5-4123-a1ba-5cbd7f104512",
"shortName": "Tanium"
},
"references": [
{
"name": "TAN-2026-064",
"url": "https://security.tanium.com/TAN-2026-064"
}
],
"title": "Tanium addressed an unauthorized code execution vulnerability in Threat Response."
}
},
"cveMetadata": {
"assignerOrgId": "3938794e-25f5-4123-a1ba-5cbd7f104512",
"assignerShortName": "Tanium",
"cveId": "CVE-2026-108329",
"datePublished": "2026-10-27T17:35:41.970Z",
"dateReserved": "2026-10-09T19:21:33.766Z",
"dateUpdated": "2026-10-27T17:35:41.970Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-108332 (GCVE-0-2026-108332)
Vulnerability from cvelistv5
Published
2026-10-27 17:35
Modified
2026-10-27 17:35
Severity ?
VLAI Severity ?
EPSS score ?
CWE
- CWE-59 - Improper Link Resolution Before File Access ('Link Following')
Summary
Tanium addressed an improper link resolution before file access vulnerability in Threat Response Client Extension.
References
Impacted products
| Vendor | Product | Version | |||||||
|---|---|---|---|---|---|---|---|---|---|
| Tanium | Endpoint Configuration Toolset Solution |
Version: 1.51.0 < 1.51.60 Version: 1.59.0 < 1.59.50 Version: 1.71.0 < 1.71.25 |
|||||||
|
|||||||||
{
"containers": {
"cna": {
"affected": [
{
"product": "Endpoint Configuration Toolset Solution",
"vendor": "Tanium",
"versions": [
{
"lessThan": "1.51.60",
"status": "affected",
"version": "1.51.0",
"versionType": "custom"
},
{
"lessThan": "1.59.50",
"status": "affected",
"version": "1.59.0",
"versionType": "custom"
},
{
"lessThan": "1.71.25",
"status": "affected",
"version": "1.71.0",
"versionType": "custom"
}
]
},
{
"product": "threat-response-cx",
"vendor": "Tanium",
"versions": [
{
"lessThan": "1.17.802",
"status": "affected",
"version": "1.17.802",
"versionType": "semver"
},
{
"lessThan": "1.18.2732",
"status": "affected",
"version": "1.18.2732",
"versionType": "semver"
},
{
"lessThan": "1.19.2213",
"status": "affected",
"version": "1.19.2213",
"versionType": "semver"
},
{
"lessThan": "1.20.2271",
"status": "affected",
"version": "1.20.2271",
"versionType": "semver"
},
{
"lessThan": "1.21.1673",
"status": "affected",
"version": "1.21.1673",
"versionType": "semver"
}
]
}
],
"dateAssigned": "2026-10-09T19:21:34.683Z",
"datePublic": "2026-10-27T17:26:16.663Z",
"descriptions": [
{
"lang": "en",
"value": "Tanium addressed an improper link resolution before file access vulnerability in Threat Response Client Extension."
}
],
"metrics": [
{
"cvssV3_1": {
"baseScore": 6.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:N",
"version": "3.1"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-59",
"description": "Improper Link Resolution Before File Access (\u0027Link Following\u0027)",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-10-27T17:35:41.790Z",
"orgId": "3938794e-25f5-4123-a1ba-5cbd7f104512",
"shortName": "Tanium"
},
"references": [
{
"name": "TAN-2026-055",
"url": "https://security.tanium.com/TAN-2026-055"
}
],
"title": "Tanium addressed an improper link resolution before file access vulnerability in Threat Response Client Extension."
}
},
"cveMetadata": {
"assignerOrgId": "3938794e-25f5-4123-a1ba-5cbd7f104512",
"assignerShortName": "Tanium",
"cveId": "CVE-2026-108332",
"datePublished": "2026-10-27T17:35:41.790Z",
"dateReserved": "2026-10-09T19:21:34.846Z",
"dateUpdated": "2026-10-27T17:35:41.790Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-108301 (GCVE-0-2026-108301)
Vulnerability from cvelistv5
Published
2026-10-27 17:35
Modified
2026-10-27 17:35
Severity ?
VLAI Severity ?
EPSS score ?
CWE
- CWE-862 - Missing Authorization
Summary
Tanium addressed an improper access controls vulnerability in Comply.
References
Impacted products
{
"containers": {
"cna": {
"affected": [
{
"product": "Comply",
"vendor": "Tanium",
"versions": [
{
"lessThan": "2.32.263",
"status": "affected",
"version": "2.32",
"versionType": "custom"
},
{
"lessThan": "2.35.323",
"status": "affected",
"version": "2.35",
"versionType": "custom"
},
{
"lessThan": "2.37.326",
"status": "affected",
"version": "2.37",
"versionType": "custom"
}
]
}
],
"dateAssigned": "2026-10-09T19:20:54.787Z",
"datePublic": "2026-10-27T17:26:20.033Z",
"descriptions": [
{
"lang": "en",
"value": "Tanium addressed an improper access controls vulnerability in Comply."
}
],
"metrics": [
{
"cvssV3_1": {
"baseScore": 6,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:L/I:L/A:L",
"version": "3.1"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-862",
"description": "Missing Authorization",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-10-27T17:35:24.243Z",
"orgId": "3938794e-25f5-4123-a1ba-5cbd7f104512",
"shortName": "Tanium"
},
"references": [
{
"name": "TAN-2026-066",
"url": "https://security.tanium.com/TAN-2026-066"
}
],
"title": "Tanium addressed an improper access controls vulnerability in Comply."
}
},
"cveMetadata": {
"assignerOrgId": "3938794e-25f5-4123-a1ba-5cbd7f104512",
"assignerShortName": "Tanium",
"cveId": "CVE-2026-108301",
"datePublished": "2026-10-27T17:35:24.243Z",
"dateReserved": "2026-10-09T19:20:55.306Z",
"dateUpdated": "2026-10-27T17:35:24.243Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-108304 (GCVE-0-2026-108304)
Vulnerability from cvelistv5
Published
2026-10-27 17:35
Modified
2026-10-27 17:35
Severity ?
VLAI Severity ?
EPSS score ?
CWE
Summary
Tanium addressed a local privilege escalation vulnerability in End-User Notifications.
References
Impacted products
| Vendor | Product | Version | |||||||
|---|---|---|---|---|---|---|---|---|---|
| Tanium | Endpoint Configuration Toolset Solution |
Version: 1.51 < 1.51.60 Version: 1.59 < 1.59.50 Version: 1.71 < 1.71.25 |
|||||||
|
|||||||||
{
"containers": {
"cna": {
"affected": [
{
"product": "Endpoint Configuration Toolset Solution",
"vendor": "Tanium",
"versions": [
{
"lessThan": "1.51.60",
"status": "affected",
"version": "1.51",
"versionType": "custom"
},
{
"lessThan": "1.59.50",
"status": "affected",
"version": "1.59",
"versionType": "custom"
},
{
"lessThan": "1.71.25",
"status": "affected",
"version": "1.71",
"versionType": "custom"
}
]
},
{
"product": "end-user-cx",
"vendor": "Tanium",
"versions": [
{
"lessThan": "1.8.47",
"status": "affected",
"version": "1.8.47",
"versionType": "semver"
},
{
"lessThan": "1.11.605",
"status": "affected",
"version": "1.11.605",
"versionType": "semver"
},
{
"lessThan": "1.19.325",
"status": "affected",
"version": "1.19.325",
"versionType": "semver"
},
{
"lessThan": "1.21.835",
"status": "affected",
"version": "1.21.835",
"versionType": "semver"
},
{
"lessThan": "1.22.1199",
"status": "affected",
"version": "1.22.1199",
"versionType": "semver"
},
{
"lessThan": "1.23.766",
"status": "affected",
"version": "1.23.766",
"versionType": "semver"
},
{
"lessThan": "1.24.590",
"status": "affected",
"version": "1.24.590",
"versionType": "semver"
}
]
}
],
"dateAssigned": "2026-10-09T19:21:24.751Z",
"datePublic": "2026-10-27T17:26:17.500Z",
"descriptions": [
{
"lang": "en",
"value": "Tanium addressed a local privilege escalation vulnerability in End-User Notifications."
}
],
"metrics": [
{
"cvssV3_1": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-59",
"description": "Improper Link Resolution Before File Access (\u0027Link Following\u0027)",
"lang": "en",
"type": "CWE"
}
]
},
{
"descriptions": [
{
"cweId": "CWE-282",
"description": "Improper Ownership Management",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-10-27T17:35:24.064Z",
"orgId": "3938794e-25f5-4123-a1ba-5cbd7f104512",
"shortName": "Tanium"
},
"references": [
{
"name": "TAN-2026-058",
"url": "https://security.tanium.com/TAN-2026-058"
}
],
"title": "Tanium addressed a local privilege escalation vulnerability in End-User Notifications."
}
},
"cveMetadata": {
"assignerOrgId": "3938794e-25f5-4123-a1ba-5cbd7f104512",
"assignerShortName": "Tanium",
"cveId": "CVE-2026-108304",
"datePublished": "2026-10-27T17:35:24.064Z",
"dateReserved": "2026-10-09T19:21:24.929Z",
"dateUpdated": "2026-10-27T17:35:24.064Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-87086 (GCVE-0-2026-87086)
Vulnerability from cvelistv5
Published
2026-10-27 17:35
Modified
2026-10-27 17:35
Severity ?
VLAI Severity ?
EPSS score ?
CWE
- CWE-690 - Unchecked Return Value to NULL Pointer Dereference
Summary
Tanium addressed a denial of service vulnerability in Provision.
References
Impacted products
{
"containers": {
"cna": {
"affected": [
{
"product": "Provision",
"vendor": "Tanium",
"versions": [
{
"lessThan": "1.17.150",
"status": "affected",
"version": "1.17",
"versionType": "custom"
},
{
"lessThan": "1.23.161",
"status": "affected",
"version": "1.23",
"versionType": "custom"
},
{
"lessThan": "1.24.199",
"status": "affected",
"version": "1.24",
"versionType": "custom"
}
]
}
],
"dateAssigned": "2026-09-08T19:38:21.409Z",
"datePublic": "2026-10-27T17:26:22.493Z",
"descriptions": [
{
"lang": "en",
"value": "Tanium addressed a denial of service vulnerability in Provision."
}
],
"metrics": [
{
"cvssV3_1": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-690",
"description": "Unchecked Return Value to NULL Pointer Dereference",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-10-27T17:35:23.877Z",
"orgId": "3938794e-25f5-4123-a1ba-5cbd7f104512",
"shortName": "Tanium"
},
"references": [
{
"name": "TAN-2026-080",
"url": "https://security.tanium.com/TAN-2026-080"
}
],
"title": "Tanium addressed a denial of service vulnerability in Provision."
}
},
"cveMetadata": {
"assignerOrgId": "3938794e-25f5-4123-a1ba-5cbd7f104512",
"assignerShortName": "Tanium",
"cveId": "CVE-2026-87086",
"datePublished": "2026-10-27T17:35:23.877Z",
"dateReserved": "2026-09-08T19:38:21.885Z",
"dateUpdated": "2026-10-27T17:35:23.877Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-108309 (GCVE-0-2026-108309)
Vulnerability from cvelistv5
Published
2026-10-27 17:35
Modified
2026-10-27 17:35
Severity ?
VLAI Severity ?
EPSS score ?
CWE
- CWE-770 - Allocation of Resources Without Limits or Throttling
Summary
Tanium addressed an uncontrolled resource consumption vulnerability in Performance Client Extension.
References
Impacted products
| Vendor | Product | Version | |||||||
|---|---|---|---|---|---|---|---|---|---|
| Tanium | Endpoint Configuration Toolset Solution |
Version: 1.51 < 1.51.60 Version: 1.59 < 1.59.50 Version: 1.71 < 1.71.25 |
|||||||
|
|||||||||
{
"containers": {
"cna": {
"affected": [
{
"product": "Endpoint Configuration Toolset Solution",
"vendor": "Tanium",
"versions": [
{
"lessThan": "1.51.60",
"status": "affected",
"version": "1.51",
"versionType": "custom"
},
{
"lessThan": "1.59.50",
"status": "affected",
"version": "1.59",
"versionType": "custom"
},
{
"lessThan": "1.71.25",
"status": "affected",
"version": "1.71",
"versionType": "custom"
}
]
},
{
"product": "performance-cx",
"vendor": "Tanium",
"versions": [
{
"lessThan": "2.7.648",
"status": "affected",
"version": "2.7.648",
"versionType": "semver"
},
{
"lessThan": "2.8.2110",
"status": "affected",
"version": "2.8.2110",
"versionType": "semver"
},
{
"lessThan": "2.9.1165",
"status": "affected",
"version": "2.9.1165",
"versionType": "semver"
},
{
"lessThan": "2.11.1312",
"status": "affected",
"version": "2.11.1312",
"versionType": "semver"
},
{
"lessThan": "2.13.1010",
"status": "affected",
"version": "2.13.1010",
"versionType": "semver"
},
{
"lessThan": "2.14.56",
"status": "affected",
"version": "2.14.56",
"versionType": "semver"
}
]
}
],
"dateAssigned": "2026-10-09T19:21:26.548Z",
"datePublic": "2026-10-27T17:26:21.130Z",
"descriptions": [
{
"lang": "en",
"value": "Tanium addressed an uncontrolled resource consumption vulnerability in Performance Client Extension."
}
],
"metrics": [
{
"cvssV3_1": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-770",
"description": "Allocation of Resources Without Limits or Throttling",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-10-27T17:35:23.693Z",
"orgId": "3938794e-25f5-4123-a1ba-5cbd7f104512",
"shortName": "Tanium"
},
"references": [
{
"name": "TAN-2026-070",
"url": "https://security.tanium.com/TAN-2026-070"
}
],
"title": "Tanium addressed an uncontrolled resource consumption vulnerability in Performance Client Extension."
}
},
"cveMetadata": {
"assignerOrgId": "3938794e-25f5-4123-a1ba-5cbd7f104512",
"assignerShortName": "Tanium",
"cveId": "CVE-2026-108309",
"datePublished": "2026-10-27T17:35:23.693Z",
"dateReserved": "2026-10-09T19:21:26.706Z",
"dateUpdated": "2026-10-27T17:35:23.693Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-116658 (GCVE-0-2026-116658)
Vulnerability from cvelistv5
Published
2026-10-27 17:35
Modified
2026-10-27 17:35
Severity ?
VLAI Severity ?
EPSS score ?
CWE
- CWE-476 - NULL Pointer Dereference
Summary
Tanium addressed a denial of service vulnerability in Enforce.
References
Impacted products
{
"containers": {
"cna": {
"affected": [
{
"product": "Enforce",
"vendor": "Tanium",
"versions": [
{
"lessThan": "2.9.736",
"status": "affected",
"version": "2.9",
"versionType": "custom"
},
{
"lessThan": "2.10.778",
"status": "affected",
"version": "2.10",
"versionType": "custom"
},
{
"lessThan": "3.0.373",
"status": "affected",
"version": "3.0",
"versionType": "custom"
}
]
}
],
"dateAssigned": "2026-10-26T19:15:07.095Z",
"datePublic": "2026-10-27T17:26:22.232Z",
"descriptions": [
{
"lang": "en",
"value": "Tanium addressed a denial of service vulnerability in Enforce."
}
],
"metrics": [
{
"cvssV3_1": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-476",
"description": "NULL Pointer Dereference",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-10-27T17:35:23.506Z",
"orgId": "3938794e-25f5-4123-a1ba-5cbd7f104512",
"shortName": "Tanium"
},
"references": [
{
"name": "TAN-2026-074",
"url": "https://security.tanium.com/TAN-2026-074"
}
],
"title": "Tanium addressed a denial of service vulnerability in Enforce."
}
},
"cveMetadata": {
"assignerOrgId": "3938794e-25f5-4123-a1ba-5cbd7f104512",
"assignerShortName": "Tanium",
"cveId": "CVE-2026-116658",
"datePublished": "2026-10-27T17:35:23.506Z",
"dateReserved": "2026-10-26T19:15:07.239Z",
"dateUpdated": "2026-10-27T17:35:23.506Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-108313 (GCVE-0-2026-108313)
Vulnerability from cvelistv5
Published
2026-10-27 17:35
Modified
2026-10-27 17:35
Severity ?
VLAI Severity ?
EPSS score ?
CWE
- CWE-178 - Improper Handling of Case Sensitivity
Summary
Tanium addressed an incorrect privilege assignment vulnerability in Tanium Server.
References
Impacted products
| Vendor | Product | Version | ||
|---|---|---|---|---|
| Tanium | Tanium Server |
Version: 7.7.3 < 7.7.3.8351 Version: 7.8.2 < 7.8.2.1263 Version: 7.8.4 < 7.8.4.1399 |
{
"containers": {
"cna": {
"affected": [
{
"product": "Tanium Server",
"vendor": "Tanium",
"versions": [
{
"lessThan": "7.7.3.8351",
"status": "affected",
"version": "7.7.3",
"versionType": "custom"
},
{
"lessThan": "7.8.2.1263",
"status": "affected",
"version": "7.8.2",
"versionType": "custom"
},
{
"lessThan": "7.8.4.1399",
"status": "affected",
"version": "7.8.4",
"versionType": "custom"
}
]
}
],
"dateAssigned": "2026-10-09T19:21:27.945Z",
"datePublic": "2026-10-27T17:26:16.384Z",
"descriptions": [
{
"lang": "en",
"value": "Tanium addressed an incorrect privilege assignment vulnerability in Tanium Server."
}
],
"metrics": [
{
"cvssV3_1": {
"baseScore": 6.6,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-178",
"description": "Improper Handling of Case Sensitivity",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-10-27T17:35:06.612Z",
"orgId": "3938794e-25f5-4123-a1ba-5cbd7f104512",
"shortName": "Tanium"
},
"references": [
{
"name": "TAN-2026-054",
"url": "https://security.tanium.com/TAN-2026-054"
}
],
"title": "Tanium addressed an incorrect privilege assignment vulnerability in Tanium Server."
}
},
"cveMetadata": {
"assignerOrgId": "3938794e-25f5-4123-a1ba-5cbd7f104512",
"assignerShortName": "Tanium",
"cveId": "CVE-2026-108313",
"datePublished": "2026-10-27T17:35:06.612Z",
"dateReserved": "2026-10-09T19:21:28.113Z",
"dateUpdated": "2026-10-27T17:35:06.612Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-116649 (GCVE-0-2026-116649)
Vulnerability from cvelistv5
Published
2026-10-27 17:35
Modified
2026-10-27 17:35
Severity ?
VLAI Severity ?
EPSS score ?
CWE
- CWE-1236 - Improper Neutralization of Formula Elements in a CSV File
Summary
Tanium addressed an improper output sanitization vulnerability in Enforce.
References
Impacted products
{
"containers": {
"cna": {
"affected": [
{
"product": "Enforce",
"vendor": "Tanium",
"versions": [
{
"lessThan": "2.9.736",
"status": "affected",
"version": "2.9",
"versionType": "custom"
},
{
"lessThan": "2.10.778",
"status": "affected",
"version": "2.10",
"versionType": "custom"
},
{
"lessThan": "3.0.373",
"status": "affected",
"version": "3.0",
"versionType": "custom"
}
]
}
],
"dateAssigned": "2026-10-26T19:15:03.481Z",
"datePublic": "2026-10-27T17:26:21.674Z",
"descriptions": [
{
"lang": "en",
"value": "Tanium addressed an improper output sanitization vulnerability in Enforce."
}
],
"metrics": [
{
"cvssV3_1": {
"baseScore": 7.1,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L",
"version": "3.1"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-1236",
"description": "Improper Neutralization of Formula Elements in a CSV File",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-10-27T17:35:06.420Z",
"orgId": "3938794e-25f5-4123-a1ba-5cbd7f104512",
"shortName": "Tanium"
},
"references": [
{
"name": "TAN-2026-072",
"url": "https://security.tanium.com/TAN-2026-072"
}
],
"title": "Tanium addressed an improper output sanitization vulnerability in Enforce."
}
},
"cveMetadata": {
"assignerOrgId": "3938794e-25f5-4123-a1ba-5cbd7f104512",
"assignerShortName": "Tanium",
"cveId": "CVE-2026-116649",
"datePublished": "2026-10-27T17:35:06.420Z",
"dateReserved": "2026-10-26T19:15:03.641Z",
"dateUpdated": "2026-10-27T17:35:06.420Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-116647 (GCVE-0-2026-116647)
Vulnerability from cvelistv5
Published
2026-10-27 17:35
Modified
2026-10-27 17:35
Severity ?
VLAI Severity ?
EPSS score ?
CWE
- CWE-1236 - Improper Neutralization of Formula Elements in a CSV File
Summary
Tanium addressed an improper output sanitization vulnerability in Comply.
References
Impacted products
{
"containers": {
"cna": {
"affected": [
{
"product": "Comply",
"vendor": "Tanium",
"versions": [
{
"lessThan": "2.32.263",
"status": "affected",
"version": "2.32",
"versionType": "custom"
},
{
"lessThan": "2.35.323",
"status": "affected",
"version": "2.35",
"versionType": "custom"
},
{
"lessThan": "2.37.326",
"status": "affected",
"version": "2.37",
"versionType": "custom"
}
]
}
],
"dateAssigned": "2026-10-26T19:15:02.679Z",
"datePublic": "2026-10-27T17:26:20.848Z",
"descriptions": [
{
"lang": "en",
"value": "Tanium addressed an improper output sanitization vulnerability in Comply."
}
],
"metrics": [
{
"cvssV3_1": {
"baseScore": 7.1,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L",
"version": "3.1"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-1236",
"description": "Improper Neutralization of Formula Elements in a CSV File",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-10-27T17:35:06.241Z",
"orgId": "3938794e-25f5-4123-a1ba-5cbd7f104512",
"shortName": "Tanium"
},
"references": [
{
"name": "TAN-2026-069",
"url": "https://security.tanium.com/TAN-2026-069"
}
],
"title": "Tanium addressed an improper output sanitization vulnerability in Comply."
}
},
"cveMetadata": {
"assignerOrgId": "3938794e-25f5-4123-a1ba-5cbd7f104512",
"assignerShortName": "Tanium",
"cveId": "CVE-2026-116647",
"datePublished": "2026-10-27T17:35:06.241Z",
"dateReserved": "2026-10-26T19:15:02.873Z",
"dateUpdated": "2026-10-27T17:35:06.241Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-116660 (GCVE-0-2026-116660)
Vulnerability from cvelistv5
Published
2026-10-27 17:35
Modified
2026-10-27 17:35
Severity ?
VLAI Severity ?
EPSS score ?
CWE
- CWE-862 - Missing Authorization
Summary
Tanium addressed an improper access controls vulnerability in Enforce.
References
Impacted products
{
"containers": {
"cna": {
"affected": [
{
"product": "Enforce",
"vendor": "Tanium",
"versions": [
{
"lessThan": "2.9.736",
"status": "affected",
"version": "2.9",
"versionType": "custom"
},
{
"lessThan": "2.10.778",
"status": "affected",
"version": "2.10",
"versionType": "custom"
},
{
"lessThan": "3.0.373",
"status": "affected",
"version": "3.0",
"versionType": "custom"
}
]
}
],
"dateAssigned": "2026-10-26T19:15:07.845Z",
"datePublic": "2026-10-27T17:26:23.885Z",
"descriptions": [
{
"lang": "en",
"value": "Tanium addressed an improper access controls vulnerability in Enforce."
}
],
"metrics": [
{
"cvssV3_1": {
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
"version": "3.1"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-862",
"description": "Missing Authorization",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-10-27T17:35:06.053Z",
"orgId": "3938794e-25f5-4123-a1ba-5cbd7f104512",
"shortName": "Tanium"
},
"references": [
{
"name": "TAN-2026-079",
"url": "https://security.tanium.com/TAN-2026-079"
}
],
"title": "Tanium addressed an improper access controls vulnerability in Enforce."
}
},
"cveMetadata": {
"assignerOrgId": "3938794e-25f5-4123-a1ba-5cbd7f104512",
"assignerShortName": "Tanium",
"cveId": "CVE-2026-116660",
"datePublished": "2026-10-27T17:35:06.053Z",
"dateReserved": "2026-10-26T19:15:07.998Z",
"dateUpdated": "2026-10-27T17:35:06.053Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-108326 (GCVE-0-2026-108326)
Vulnerability from cvelistv5
Published
2026-10-27 17:35
Modified
2026-10-27 17:35
Severity ?
VLAI Severity ?
EPSS score ?
CWE
- CWE-295 - Improper Certificate Validation
Summary
Tanium addressed an improper certificate validation vulnerability in Stream Client Extension.
References
Impacted products
| Vendor | Product | Version | ||
|---|---|---|---|---|
| Tanium | Endpoint Configuration Toolset Solution |
Version: 1.51 < 1.51.60 Version: 1.59 < 1.59.50 Version: 1.71 < 1.71.25 |
||
{
"containers": {
"cna": {
"affected": [
{
"product": "Endpoint Configuration Toolset Solution",
"vendor": "Tanium",
"versions": [
{
"lessThan": "1.51.60",
"status": "affected",
"version": "1.51",
"versionType": "custom"
},
{
"lessThan": "1.59.50",
"status": "affected",
"version": "1.59",
"versionType": "custom"
},
{
"lessThan": "1.71.25",
"status": "affected",
"version": "1.71",
"versionType": "custom"
}
]
},
{
"product": "cx-stream",
"vendor": "Tanium",
"versions": [
{
"lessThan": "2.4.1184",
"status": "affected",
"version": "2.4.1184",
"versionType": "semver"
},
{
"lessThan": "2.7.1160",
"status": "affected",
"version": "2.7.1160",
"versionType": "semver"
},
{
"lessThan": "2.8.1465",
"status": "affected",
"version": "2.8.1465",
"versionType": "semver"
},
{
"lessThan": "2.9.561",
"status": "affected",
"version": "2.9.561",
"versionType": "semver"
}
]
}
],
"dateAssigned": "2026-10-09T19:21:32.598Z",
"datePublic": "2026-10-27T17:26:18.042Z",
"descriptions": [
{
"lang": "en",
"value": "Tanium addressed an improper certificate validation vulnerability in Stream Client Extension."
}
],
"metrics": [
{
"cvssV3_1": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:L",
"version": "3.1"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-295",
"description": "Improper Certificate Validation",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-10-27T17:35:05.870Z",
"orgId": "3938794e-25f5-4123-a1ba-5cbd7f104512",
"shortName": "Tanium"
},
"references": [
{
"name": "TAN-2026-060",
"url": "https://security.tanium.com/TAN-2026-060"
}
],
"title": "Tanium addressed an improper certificate validation vulnerability in Stream Client Extension."
}
},
"cveMetadata": {
"assignerOrgId": "3938794e-25f5-4123-a1ba-5cbd7f104512",
"assignerShortName": "Tanium",
"cveId": "CVE-2026-108326",
"datePublished": "2026-10-27T17:35:05.870Z",
"dateReserved": "2026-10-09T19:21:32.766Z",
"dateUpdated": "2026-10-27T17:35:05.870Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-108330 (GCVE-0-2026-108330)
Vulnerability from cvelistv5
Published
2026-10-27 17:35
Modified
2026-10-27 17:35
Severity ?
VLAI Severity ?
EPSS score ?
CWE
- CWE-125 - Out-of-bounds Read
Summary
Tanium addressed an information disclosure vulnerability in Threat Response Client Extension.
References
Impacted products
| Vendor | Product | Version | |||||||
|---|---|---|---|---|---|---|---|---|---|
| Tanium | Endpoint Configuration Toolset Solution |
Version: 1.71.0 < 1.71.25 Version: 1.59.0 < 1.59.50 Version: 1.51.0 < 1.51.60 |
|||||||
|
|||||||||
{
"containers": {
"cna": {
"affected": [
{
"product": "Endpoint Configuration Toolset Solution",
"vendor": "Tanium",
"versions": [
{
"lessThan": "1.71.25",
"status": "affected",
"version": "1.71.0",
"versionType": "custom"
},
{
"lessThan": "1.59.50",
"status": "affected",
"version": "1.59.0",
"versionType": "custom"
},
{
"lessThan": "1.51.60",
"status": "affected",
"version": "1.51.0",
"versionType": "custom"
}
]
},
{
"product": "threat-response-cx",
"vendor": "Tanium",
"versions": [
{
"lessThan": "1.17.802",
"status": "affected",
"version": "1.17.802",
"versionType": "semver"
},
{
"lessThan": "1.18.2732",
"status": "affected",
"version": "1.18.2732",
"versionType": "semver"
},
{
"lessThan": "1.19.2213",
"status": "affected",
"version": "1.19.2213",
"versionType": "semver"
},
{
"lessThan": "1.20.2271",
"status": "affected",
"version": "1.20.2271",
"versionType": "semver"
},
{
"lessThan": "1.21.1673",
"status": "affected",
"version": "1.21.1673",
"versionType": "semver"
}
]
}
],
"dateAssigned": "2026-10-09T19:21:33.985Z",
"datePublic": "2026-10-27T17:26:16.937Z",
"descriptions": [
{
"lang": "en",
"value": "Tanium addressed an information disclosure vulnerability in Threat Response Client Extension."
}
],
"metrics": [
{
"cvssV3_1": {
"baseScore": 3.6,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:L",
"version": "3.1"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-125",
"description": "Out-of-bounds Read",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-10-27T17:35:05.683Z",
"orgId": "3938794e-25f5-4123-a1ba-5cbd7f104512",
"shortName": "Tanium"
},
"references": [
{
"name": "TAN-2026-056",
"url": "https://security.tanium.com/TAN-2026-056"
}
],
"title": "Tanium addressed an information disclosure vulnerability in Threat Response Client Extension."
}
},
"cveMetadata": {
"assignerOrgId": "3938794e-25f5-4123-a1ba-5cbd7f104512",
"assignerShortName": "Tanium",
"cveId": "CVE-2026-108330",
"datePublished": "2026-10-27T17:35:05.683Z",
"dateReserved": "2026-10-09T19:21:34.110Z",
"dateUpdated": "2026-10-27T17:35:05.683Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-116657 (GCVE-0-2026-116657)
Vulnerability from cvelistv5
Published
2026-10-27 17:34
Modified
2026-10-27 17:34
Severity ?
VLAI Severity ?
EPSS score ?
CWE
- CWE-770 - Allocation of Resources Without Limits or Throttling
Summary
Tanium addressed a denial of service vulnerability in Enforce.
References
Impacted products
{
"containers": {
"cna": {
"affected": [
{
"product": "Enforce",
"vendor": "Tanium",
"versions": [
{
"lessThan": "2.9.736",
"status": "affected",
"version": "2.9",
"versionType": "custom"
},
{
"lessThan": "2.10.778",
"status": "affected",
"version": "2.10",
"versionType": "custom"
},
{
"lessThan": "3.0.373",
"status": "affected",
"version": "3.0",
"versionType": "custom"
}
]
}
],
"dateAssigned": "2026-10-26T19:15:06.650Z",
"datePublic": "2026-10-27T17:26:15.804Z",
"descriptions": [
{
"lang": "en",
"value": "Tanium addressed a denial of service vulnerability in Enforce."
}
],
"metrics": [
{
"cvssV3_1": {
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
"version": "3.1"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-770",
"description": "Allocation of Resources Without Limits or Throttling",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-10-27T17:34:47.970Z",
"orgId": "3938794e-25f5-4123-a1ba-5cbd7f104512",
"shortName": "Tanium"
},
"references": [
{
"name": "TAN-2026-052",
"url": "https://security.tanium.com/TAN-2026-052"
}
],
"title": "Tanium addressed a denial of service vulnerability in Enforce."
}
},
"cveMetadata": {
"assignerOrgId": "3938794e-25f5-4123-a1ba-5cbd7f104512",
"assignerShortName": "Tanium",
"cveId": "CVE-2026-116657",
"datePublished": "2026-10-27T17:34:47.970Z",
"dateReserved": "2026-10-26T19:15:06.796Z",
"dateUpdated": "2026-10-27T17:34:47.970Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-108333 (GCVE-0-2026-108333)
Vulnerability from cvelistv5
Published
2026-10-27 17:33
Modified
2026-10-27 17:33
Severity ?
VLAI Severity ?
EPSS score ?
CWE
- CWE-416 - Use After Free
Summary
Tanium addressed a use-after-free vulnerability in Threat Response Client Extension.
References
Impacted products
| Vendor | Product | Version | |||||||
|---|---|---|---|---|---|---|---|---|---|
| Tanium | Endpoint Configuration Toolset Solution |
Version: 1.51 < 1.51.60 Version: 1.59 < 1.59.50 Version: 1.71 < 1.71.25 |
|||||||
|
|||||||||
{
"containers": {
"cna": {
"affected": [
{
"product": "Endpoint Configuration Toolset Solution",
"vendor": "Tanium",
"versions": [
{
"lessThan": "1.51.60",
"status": "affected",
"version": "1.51",
"versionType": "custom"
},
{
"lessThan": "1.59.50",
"status": "affected",
"version": "1.59",
"versionType": "custom"
},
{
"lessThan": "1.71.25",
"status": "affected",
"version": "1.71",
"versionType": "custom"
}
]
},
{
"product": "threat-response-cx",
"vendor": "Tanium",
"versions": [
{
"lessThan": "1.17.802",
"status": "affected",
"version": "1.17.802",
"versionType": "semver"
},
{
"lessThan": "1.18.2732",
"status": "affected",
"version": "1.18.2732",
"versionType": "semver"
},
{
"lessThan": "1.19.2213",
"status": "affected",
"version": "1.19.2213",
"versionType": "semver"
},
{
"lessThan": "1.20.2271",
"status": "affected",
"version": "1.20.2271",
"versionType": "semver"
},
{
"lessThan": "1.21.1673",
"status": "affected",
"version": "1.21.1673",
"versionType": "semver"
}
]
}
],
"dateAssigned": "2026-10-09T19:21:35.035Z",
"datePublic": "2026-10-27T17:26:20.572Z",
"descriptions": [
{
"lang": "en",
"value": "Tanium addressed a use-after-free vulnerability in Threat Response Client Extension."
}
],
"metrics": [
{
"cvssV3_1": {
"baseScore": 2.5,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:L",
"version": "3.1"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-416",
"description": "Use After Free",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-10-27T17:33:55.473Z",
"orgId": "3938794e-25f5-4123-a1ba-5cbd7f104512",
"shortName": "Tanium"
},
"references": [
{
"name": "TAN-2026-068",
"url": "https://security.tanium.com/TAN-2026-068"
}
],
"title": "Tanium addressed a use-after-free vulnerability in Threat Response Client Extension."
}
},
"cveMetadata": {
"assignerOrgId": "3938794e-25f5-4123-a1ba-5cbd7f104512",
"assignerShortName": "Tanium",
"cveId": "CVE-2026-108333",
"datePublished": "2026-10-27T17:33:55.473Z",
"dateReserved": "2026-10-09T19:21:35.177Z",
"dateUpdated": "2026-10-27T17:33:55.473Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-108307 (GCVE-0-2026-108307)
Vulnerability from cvelistv5
Published
2026-10-27 17:33
Modified
2026-10-27 17:33
Severity ?
VLAI Severity ?
EPSS score ?
CWE
- CWE-122 - Heap-based Buffer Overflow
Summary
Tanium addressed a heap-based buffer overflow vulnerability in Index.
References
Impacted products
| Vendor | Product | Version | ||
|---|---|---|---|---|
| Tanium | Endpoint Configuration Toolset Solution |
Version: 1.51 < 1.51.60 Version: 1.59 < 1.59.50 Version: 1.71 < 1.71.25 |
||
{
"containers": {
"cna": {
"affected": [
{
"product": "Endpoint Configuration Toolset Solution",
"vendor": "Tanium",
"versions": [
{
"lessThan": "1.51.60",
"status": "affected",
"version": "1.51",
"versionType": "custom"
},
{
"lessThan": "1.59.50",
"status": "affected",
"version": "1.59",
"versionType": "custom"
},
{
"lessThan": "1.71.25",
"status": "affected",
"version": "1.71",
"versionType": "custom"
}
]
},
{
"product": "index-cx",
"vendor": "Tanium",
"versions": [
{
"lessThan": "3.9.520",
"status": "affected",
"version": "3.9.520",
"versionType": "semver"
},
{
"lessThan": "3.11.443",
"status": "affected",
"version": "3.11.443",
"versionType": "semver"
},
{
"lessThan": "3.14.921",
"status": "affected",
"version": "3.14.921",
"versionType": "semver"
},
{
"lessThan": "3.14.917",
"status": "affected",
"version": "3.14.917",
"versionType": "semver"
},
{
"lessThan": "3.15.2420",
"status": "affected",
"version": "3.15.2420",
"versionType": "semver"
},
{
"lessThan": "3.16.984",
"status": "affected",
"version": "3.16.984",
"versionType": "semver"
}
]
}
],
"dateAssigned": "2026-10-09T19:21:25.812Z",
"datePublic": "2026-10-27T17:26:17.206Z",
"descriptions": [
{
"lang": "en",
"value": "Tanium addressed a heap-based buffer overflow vulnerability in Index."
}
],
"metrics": [
{
"cvssV3_1": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-122",
"description": "Heap-based Buffer Overflow",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-10-27T17:33:55.273Z",
"orgId": "3938794e-25f5-4123-a1ba-5cbd7f104512",
"shortName": "Tanium"
},
"references": [
{
"name": "TAN-2026-057",
"url": "https://security.tanium.com/TAN-2026-057"
}
],
"title": "Tanium addressed a heap-based buffer overflow vulnerability in Index."
}
},
"cveMetadata": {
"assignerOrgId": "3938794e-25f5-4123-a1ba-5cbd7f104512",
"assignerShortName": "Tanium",
"cveId": "CVE-2026-108307",
"datePublished": "2026-10-27T17:33:55.273Z",
"dateReserved": "2026-10-09T19:21:25.936Z",
"dateUpdated": "2026-10-27T17:33:55.273Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-108310 (GCVE-0-2026-108310)
Vulnerability from cvelistv5
Published
2026-10-27 17:33
Modified
2026-10-27 17:33
Severity ?
VLAI Severity ?
EPSS score ?
CWE
- CWE-770 - Allocation of Resources Without Limits or Throttling
Summary
Tanium addressed a denial of service vulnerability in Tanium Server.
References
Impacted products
| Vendor | Product | Version | ||
|---|---|---|---|---|
| Tanium | Tanium Server |
Version: 7.7.3 < 7.7.3.8351 Version: 7.8.2 < 7.8.2.1263 Version: 7.8.4 < 7.8.4.1399 |
{
"containers": {
"cna": {
"affected": [
{
"product": "Tanium Server",
"vendor": "Tanium",
"versions": [
{
"lessThan": "7.7.3.8351",
"status": "affected",
"version": "7.7.3",
"versionType": "custom"
},
{
"lessThan": "7.8.2.1263",
"status": "affected",
"version": "7.8.2",
"versionType": "custom"
},
{
"lessThan": "7.8.4.1399",
"status": "affected",
"version": "7.8.4",
"versionType": "custom"
}
]
}
],
"dateAssigned": "2026-10-09T19:21:26.896Z",
"datePublic": "2026-10-27T17:26:23.069Z",
"descriptions": [
{
"lang": "en",
"value": "Tanium addressed a denial of service vulnerability in Tanium Server."
}
],
"metrics": [
{
"cvssV3_1": {
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
"version": "3.1"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-770",
"description": "Allocation of Resources Without Limits or Throttling",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-10-27T17:33:33.737Z",
"orgId": "3938794e-25f5-4123-a1ba-5cbd7f104512",
"shortName": "Tanium"
},
"references": [
{
"name": "TAN-2026-076",
"url": "https://security.tanium.com/TAN-2026-076"
}
],
"title": "Tanium addressed a denial of service vulnerability in Tanium Server."
}
},
"cveMetadata": {
"assignerOrgId": "3938794e-25f5-4123-a1ba-5cbd7f104512",
"assignerShortName": "Tanium",
"cveId": "CVE-2026-108310",
"datePublished": "2026-10-27T17:33:33.737Z",
"dateReserved": "2026-10-09T19:21:27.059Z",
"dateUpdated": "2026-10-27T17:33:33.737Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-116662 (GCVE-0-2026-116662)
Vulnerability from cvelistv5
Published
2026-10-27 17:33
Modified
2026-10-27 17:33
Severity ?
VLAI Severity ?
EPSS score ?
CWE
- CWE-409 - Improper Handling of Highly Compressed Data (Data Amplification)
Summary
Tanium addressed a compression bomb vulnerability in Enforce.
References
Impacted products
{
"containers": {
"cna": {
"affected": [
{
"product": "Enforce",
"vendor": "Tanium",
"versions": [
{
"lessThan": "2.9.736",
"status": "affected",
"version": "2.9",
"versionType": "custom"
},
{
"lessThan": "2.10.778",
"status": "affected",
"version": "2.10",
"versionType": "custom"
},
{
"lessThan": "3.0.373",
"status": "affected",
"version": "3.0",
"versionType": "custom"
}
]
}
],
"dateAssigned": "2026-10-26T19:15:08.602Z",
"datePublic": "2026-10-27T17:26:17.772Z",
"descriptions": [
{
"lang": "en",
"value": "Tanium addressed a compression bomb vulnerability in Enforce."
}
],
"metrics": [
{
"cvssV3_1": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-409",
"description": "Improper Handling of Highly Compressed Data (Data Amplification)",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-10-27T17:33:33.558Z",
"orgId": "3938794e-25f5-4123-a1ba-5cbd7f104512",
"shortName": "Tanium"
},
"references": [
{
"name": "TAN-2026-059",
"url": "https://security.tanium.com/TAN-2026-059"
}
],
"title": "Tanium addressed a compression bomb vulnerability in Enforce."
}
},
"cveMetadata": {
"assignerOrgId": "3938794e-25f5-4123-a1ba-5cbd7f104512",
"assignerShortName": "Tanium",
"cveId": "CVE-2026-116662",
"datePublished": "2026-10-27T17:33:33.558Z",
"dateReserved": "2026-10-26T19:15:08.748Z",
"dateUpdated": "2026-10-27T17:33:33.558Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-108305 (GCVE-0-2026-108305)
Vulnerability from cvelistv5
Published
2026-10-27 17:33
Modified
2026-10-27 17:33
Severity ?
VLAI Severity ?
EPSS score ?
CWE
- CWE-59 - Improper Link Resolution Before File Access ('Link Following')
Summary
Tanium addressed a local privilege escalation vulnerability in End-User Notifications.
References
Impacted products
| Vendor | Product | Version | |||||||
|---|---|---|---|---|---|---|---|---|---|
| Tanium | Endpoint Configuration Toolset Solution |
Version: 1.51 < 1.51.60 Version: 1.59 < 1.59.50 Version: 1.71 < 1.71.25 |
|||||||
|
|||||||||
{
"containers": {
"cna": {
"affected": [
{
"product": "Endpoint Configuration Toolset Solution",
"vendor": "Tanium",
"versions": [
{
"lessThan": "1.51.60",
"status": "affected",
"version": "1.51",
"versionType": "custom"
},
{
"lessThan": "1.59.50",
"status": "affected",
"version": "1.59",
"versionType": "custom"
},
{
"lessThan": "1.71.25",
"status": "affected",
"version": "1.71",
"versionType": "custom"
}
]
},
{
"product": "end-user-cx",
"vendor": "Tanium",
"versions": [
{
"lessThan": "1.8.47",
"status": "affected",
"version": "1.8.47",
"versionType": "semver"
},
{
"lessThan": "1.11.605",
"status": "affected",
"version": "1.11.605",
"versionType": "semver"
},
{
"lessThan": "1.19.325",
"status": "affected",
"version": "1.19.325",
"versionType": "semver"
},
{
"lessThan": "1.21.835",
"status": "affected",
"version": "1.21.835",
"versionType": "semver"
},
{
"lessThan": "1.22.1199",
"status": "affected",
"version": "1.22.1199",
"versionType": "semver"
},
{
"lessThan": "1.23.766",
"status": "affected",
"version": "1.23.766",
"versionType": "semver"
},
{
"lessThan": "1.24.590",
"status": "affected",
"version": "1.24.590",
"versionType": "semver"
}
]
}
],
"dateAssigned": "2026-10-09T19:21:25.115Z",
"datePublic": "2026-10-27T17:26:18.366Z",
"descriptions": [
{
"lang": "en",
"value": "Tanium addressed a local privilege escalation vulnerability in End-User Notifications."
}
],
"metrics": [
{
"cvssV3_1": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-59",
"description": "Improper Link Resolution Before File Access (\u0027Link Following\u0027)",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-10-27T17:33:33.369Z",
"orgId": "3938794e-25f5-4123-a1ba-5cbd7f104512",
"shortName": "Tanium"
},
"references": [
{
"name": "TAN-2026-061",
"url": "https://security.tanium.com/TAN-2026-061"
}
],
"title": "Tanium addressed a local privilege escalation vulnerability in End-User Notifications."
}
},
"cveMetadata": {
"assignerOrgId": "3938794e-25f5-4123-a1ba-5cbd7f104512",
"assignerShortName": "Tanium",
"cveId": "CVE-2026-108305",
"datePublished": "2026-10-27T17:33:33.369Z",
"dateReserved": "2026-10-09T19:21:25.285Z",
"dateUpdated": "2026-10-27T17:33:33.369Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-108331 (GCVE-0-2026-108331)
Vulnerability from cvelistv5
Published
2026-10-27 17:32
Modified
2026-10-27 17:32
Severity ?
VLAI Severity ?
EPSS score ?
Summary
Tanium addressed an infinite loop vulnerability in Threat Response Client Extension.
References
Impacted products
| Vendor | Product | Version | |||||||
|---|---|---|---|---|---|---|---|---|---|
| Tanium | Endpoint Configuration Toolset Solution |
Version: 1.71.0 < 1.71.25 Version: 1.59.0 < 1.59.50 Version: 1.51.0 < 1.51.60 |
|||||||
|
|||||||||
{
"containers": {
"cna": {
"affected": [
{
"product": "Endpoint Configuration Toolset Solution",
"vendor": "Tanium",
"versions": [
{
"lessThan": "1.71.25",
"status": "affected",
"version": "1.71.0",
"versionType": "custom"
},
{
"lessThan": "1.59.50",
"status": "affected",
"version": "1.59.0",
"versionType": "custom"
},
{
"lessThan": "1.51.60",
"status": "affected",
"version": "1.51.0",
"versionType": "custom"
}
]
},
{
"product": "threat-response-cx",
"vendor": "Tanium",
"versions": [
{
"lessThan": "1.17.802",
"status": "affected",
"version": "1.17.802",
"versionType": "semver"
},
{
"lessThan": "1.18.2732",
"status": "affected",
"version": "1.18.2732",
"versionType": "semver"
},
{
"lessThan": "1.19.2213",
"status": "affected",
"version": "1.19.2213",
"versionType": "semver"
},
{
"lessThan": "1.20.2271",
"status": "affected",
"version": "1.20.2271",
"versionType": "semver"
},
{
"lessThan": "1.21.1673",
"status": "affected",
"version": "1.21.1673",
"versionType": "semver"
}
]
}
],
"dateAssigned": "2026-10-09T19:21:34.333Z",
"datePublic": "2026-10-27T17:26:18.901Z",
"descriptions": [
{
"lang": "en",
"value": "Tanium addressed an infinite loop vulnerability in Threat Response Client Extension."
}
],
"metrics": [
{
"cvssV3_1": {
"baseScore": 3.3,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L",
"version": "3.1"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-674",
"description": "Uncontrolled Recursion",
"lang": "en",
"type": "CWE"
}
]
},
{
"descriptions": [
{
"cweId": "CWE-400",
"description": "Uncontrolled Resource Consumption",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-10-27T17:32:07.314Z",
"orgId": "3938794e-25f5-4123-a1ba-5cbd7f104512",
"shortName": "Tanium"
},
"references": [
{
"name": "TAN-2026-063",
"url": "https://security.tanium.com/TAN-2026-063"
}
],
"title": "Tanium addressed an infinite loop vulnerability in Threat Response Client Extension."
}
},
"cveMetadata": {
"assignerOrgId": "3938794e-25f5-4123-a1ba-5cbd7f104512",
"assignerShortName": "Tanium",
"cveId": "CVE-2026-108331",
"datePublished": "2026-10-27T17:32:07.314Z",
"dateReserved": "2026-10-09T19:21:34.494Z",
"dateUpdated": "2026-10-27T17:32:07.314Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-87085 (GCVE-0-2026-87085)
Vulnerability from cvelistv5
Published
2026-10-27 17:31
Modified
2026-10-27 17:31
Severity ?
VLAI Severity ?
EPSS score ?
CWE
- CWE-89 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
Summary
Tanium addressed a SQL injection vulnerability in Provision.
References
Impacted products
{
"containers": {
"cna": {
"affected": [
{
"product": "Provision",
"vendor": "Tanium",
"versions": [
{
"lessThan": "1.17.150",
"status": "affected",
"version": "1.17",
"versionType": "custom"
},
{
"lessThan": "1.23.161",
"status": "affected",
"version": "1.23",
"versionType": "custom"
},
{
"lessThan": "1.24.199",
"status": "affected",
"version": "1.24",
"versionType": "custom"
}
]
}
],
"dateAssigned": "2026-09-08T19:33:51.251Z",
"datePublic": "2026-10-27T17:26:19.173Z",
"descriptions": [
{
"lang": "en",
"value": "Tanium addressed a SQL injection vulnerability in Provision."
}
],
"metrics": [
{
"cvssV3_1": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
"version": "3.1"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-89",
"description": "Improper Neutralization of Special Elements used in an SQL Command (\u0027SQL Injection\u0027)",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-10-27T17:31:29.433Z",
"orgId": "3938794e-25f5-4123-a1ba-5cbd7f104512",
"shortName": "Tanium"
},
"references": [
{
"name": "TAN-2026-023",
"url": "https://security.tanium.com/TAN-2026-023"
}
],
"title": "Tanium addressed a SQL injection vulnerability in Provision."
}
},
"cveMetadata": {
"assignerOrgId": "3938794e-25f5-4123-a1ba-5cbd7f104512",
"assignerShortName": "Tanium",
"cveId": "CVE-2026-87085",
"datePublished": "2026-10-27T17:31:29.433Z",
"dateReserved": "2026-09-08T19:33:51.677Z",
"dateUpdated": "2026-10-27T17:31:29.433Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-108308 (GCVE-0-2026-108308)
Vulnerability from cvelistv5
Published
2026-10-27 17:30
Modified
2026-10-27 17:30
Severity ?
VLAI Severity ?
EPSS score ?
CWE
- CWE-89 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
Summary
Tanium addressed a SQL injection vulnerability in Patch.
References
Impacted products
{
"containers": {
"cna": {
"affected": [
{
"product": "Patch",
"vendor": "Tanium",
"versions": [
{
"lessThan": "3.24.306",
"status": "affected",
"version": "3.24",
"versionType": "custom"
},
{
"lessThan": "3.28.325",
"status": "affected",
"version": "3.28",
"versionType": "custom"
},
{
"lessThan": "3.32.353",
"status": "affected",
"version": "3.32",
"versionType": "custom"
}
]
}
],
"dateAssigned": "2026-10-09T19:21:26.199Z",
"datePublic": "2026-10-27T17:26:16.092Z",
"descriptions": [
{
"lang": "en",
"value": "Tanium addressed a SQL injection vulnerability in Patch."
}
],
"metrics": [
{
"cvssV3_1": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
"version": "3.1"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-89",
"description": "Improper Neutralization of Special Elements used in an SQL Command (\u0027SQL Injection\u0027)",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-10-27T17:30:53.396Z",
"orgId": "3938794e-25f5-4123-a1ba-5cbd7f104512",
"shortName": "Tanium"
},
"references": [
{
"name": "TAN-2026-053",
"url": "https://security.tanium.com/TAN-2026-053"
}
],
"title": "Tanium addressed a SQL injection vulnerability in Patch."
}
},
"cveMetadata": {
"assignerOrgId": "3938794e-25f5-4123-a1ba-5cbd7f104512",
"assignerShortName": "Tanium",
"cveId": "CVE-2026-108308",
"datePublished": "2026-10-27T17:30:53.396Z",
"dateReserved": "2026-10-09T19:21:26.384Z",
"dateUpdated": "2026-10-27T17:30:53.396Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}