Tanium vulnerabilities and threats

87 threats

Severity	CVSS	Signals	Threat	Source	Published
Medium	4.3	EPSS 0.3%	CVE-2026-87046Tanium Comply · Incorrect Authorization Medium4.3EPSS 0.3%2026-09-09CVE Database V5CVE-2026-87046 Tanium addressed an improper access controls vulnerability in Comply. EPSS 0.3%Vulnerability #ghsa-pq2h-cxgm-99jq	CVE Database V5	2026-09-09
Medium	5.4	EPSS 0.3%	CVE-2026-87025Tanium Comply · Insecure Direct Object Reference Medium5.4EPSS 0.3%2026-09-09CVE Database V5CVE-2026-87025 Tanium addressed an improper access controls vulnerability in Comply. EPSS 0.3%Vulnerability #ghsa-v2ww-4j3v-p896	CVE Database V5	2026-09-09
High	8.1	EPSS 0.4%	CVE-2026-87075Tanium Comply · Incorrect Authorization High8.1EPSS 0.4%2026-09-09CVE Database V5CVE-2026-87075 Tanium addressed an improper access controls vulnerability in Comply. EPSS 0.4%Vulnerability #ghsa-f6vm-66c7-gx6q	CVE Database V5	2026-09-09
Medium	6.3	EPSS 0.3%	CVE-2026-87047Tanium Comply · Insecure Direct Object Reference Medium6.3EPSS 0.3%2026-09-09CVE Database V5CVE-2026-87047 Tanium addressed an improper access controls vulnerability in Comply. EPSS 0.3%Vulnerability #ghsa-3pc6-5vx3-vf24	CVE Database V5	2026-09-09
Medium	4.3	EPSS 0.3%	CVE-2026-87019Tanium Comply · Insecure Direct Object Reference Medium4.3EPSS 0.3%2026-09-09CVE Database V5CVE-2026-87019 Tanium addressed an improper access controls vulnerability in Comply. EPSS 0.3%Vulnerability #ghsa-jf2j-839q-ggg6	CVE Database V5	2026-09-09
Medium	6.6	EPSS 0.4%	CVE-2026-14505Tanium Data Service · Path Traversal Medium6.6EPSS 0.4%2026-09-09CVE Database V5CVE-2026-14505 Tanium addressed a path traversal vulnerability in Tanium Data Service. EPSS 0.4%Vulnerability #ghsa-r665-rwh7-rw45	CVE Database V5	2026-09-09
Medium	5.4	EPSS 0.2%	CVE-2026-87037Tanium Comply · Missing Authorization Medium5.4EPSS 0.2%2026-09-09CVE Database V5CVE-2026-87037 Tanium addressed an improper access controls vulnerability in Comply. EPSS 0.2%Vulnerability #ghsa-6h5p-xfhp-cv58	CVE Database V5	2026-09-09
High	7.0	EPSS 0.2%	CVE-2026-87088Tanium Enforce · OS Command Injection High7.0EPSS 0.2%2026-09-09CVE Database V5CVE-2026-87088 Tanium addressed an unauthorized code execution vulnerability in Enforce. EPSS 0.2%Vulnerability #ghsa-c2wm-w3vg-fr54	CVE Database V5	2026-09-09
Medium	5.3	EPSS 0.4%	CVE-2026-55624MintyItanium Lost-Auction · Always-Incorrect Control Flow Implementation Medium5.3EPSS 0.4%2026-08-25CVE Database V5CVE-2026-55624 CVE-2026-55624 is a medium severity vulnerability in the MintyItanium Lost-Auction Minecraft plugin. Before a specific commit (88c920b05042929db334ba06d57f052b42d6b3f8), players could exploit the plugin's GUI to take items such as barrier blocks or duplicate items. This issue was fixed in the referenced commit. No affected versions are explicitly stated, and no known exploits are reported in the wild. EPSS 0.4%Vulnerability CWE-670	CVE Database V5	2026-08-25
Low	3.1	EPSS 0.3%	CVE-2026-11617Tanium Findings · Data Amplification Low3.1EPSS 0.3%2026-08-19CVE Database V5CVE-2026-11617 CVE-2026-11617 is a low-severity vulnerability in Tanium Findings involving improper handling of highly compressed data, also known as a compression bomb. This flaw can cause data amplification leading to denial of service conditions. Tanium has addressed this issue in updated versions of the Findings product. EPSS 0.3%Vulnerability	CVE Database V5	2026-08-19
Low	3.1	EPSS 0.3%	CVE-2026-75476Tanium Threat Response · Data Amplification Low3.1EPSS 0.3%2026-08-19CVE Database V5CVE-2026-75476 CVE-2026-75476 is a low-severity vulnerability in Tanium Threat Response involving improper handling of highly compressed data, also known as a compression bomb. This flaw can lead to data amplification issues causing availability impact. Tanium has addressed this vulnerability in specific versions of Threat Response. EPSS 0.3%Vulnerability	CVE Database V5	2026-08-19
Medium	6.3	EPSS 0.3%	CVE-2026-11391Tanium Patch · SQL Injection Medium6.3EPSS 0.3%2026-07-28CVE Database V5CVE-2026-11391 Tanium addressed a SQL injection vulnerability in Patch. EPSS 0.3%Vulnerability	CVE Database V5	2026-07-28
Medium	4.4	EPSS 0.2%	CVE-2026-12139Tanium Connect · Invocation of Process Using Visible Sensitive Information Medium4.4EPSS 0.2%2026-07-21CVE Database V5CVE-2026-12139 Tanium addressed an information disclosure vulnerability in Connect. EPSS 0.2%Vulnerability	CVE Database V5	2026-07-21
Low	2.7	EPSS 0.3%	CVE-2026-11925Tanium Server · User Interface (UI) Misrepresentation of Critical Information Low2.7EPSS 0.3%2026-07-21CVE Database V5CVE-2026-11925 Tanium addressed a User Interface (UI) Misrepresentation of Critical Information vulnerability in Tanium Server. EPSS 0.3%Vulnerability	CVE Database V5	2026-07-21
High	7.5	EPSS 0.5%	CVE-2026-15053Tanium Server · Excessive Memory Allocation High7.5EPSS 0.5%2026-07-08CVE Database V5CVE-2026-15053 Tanium addressed a denial of service vulnerability in Tanium Server. EPSS 0.5%Vulnerability CWE-789	CVE Database V5	2026-07-08
High	8.8	EPSS 0.4%	CVE-2026-9208Tanium Connect · OS Command Injection High8.8EPSS 0.4%2026-05-27CVE Database V5CVE-2026-9208 Tanium addressed an unauthorized code execution vulnerability in Connect. EPSS 0.4%Vulnerability	CVE Database V5	2026-05-27
High	8.8	EPSS 0.4%	CVE-2026-9207Tanium Connect · OS Command Injection High8.8EPSS 0.4%2026-05-27CVE Database V5CVE-2026-9207 Tanium addressed an unauthorized code execution vulnerability in Connect. EPSS 0.4%Vulnerability	CVE Database V5	2026-05-27
Medium	6.5	EPSS 0.2%	CVE-2026-9156Tanium Server · Missing Release of Resource after Effective Lifetime Medium6.5EPSS 0.2%2026-05-27CVE Database V5CVE-2026-9156 Tanium addressed a denial of service vulnerability in Tanium Server. EPSS 0.2%Vulnerability	CVE Database V5	2026-05-27
Low	2.7	EPSS 0.2%	CVE-2026-6408Tanium Server · Insufficiently Protected Credentials Low2.7EPSS 0.2%2026-04-22CVE Database V5CVE-2026-6408 CVE-2026-6408 is an information disclosure vulnerability in Tanium Server that involves insufficiently protected credentials. The vulnerability affects specific versions of Tanium Server (7.6.4.0, 7.7.3.0, and 7.8.2. EPSS 0.2%Vulnerability	CVE Database V5	2026-04-22
Low	2.7	EPSS 0.2%	CVE-2026-6392Tanium Threat Response · Information Exposure Low2.7EPSS 0.2%2026-04-22CVE Database V5CVE-2026-6392 CVE-2026-6392 is an information disclosure vulnerability in Tanium Threat Response versions 4.6.0 and 4.9.0. The vulnerability allows exposure of sensitive information to unauthorized actors. The CVSS score is low (2.7), indicating limited impact. There is no explicit vendor advisory or patch information provided. No known exploits are reported in the wild. EPSS 0.2%Vulnerability	CVE Database V5	2026-04-22

Page 2 of 5