Tanium vulnerabilities and threats

87 threats

Severity	CVSS	Signals	Threat	Source	Published
Low	3.8	EPSS 0.3%	CVE-2026-87026Tanium Threat Response · Missing Authorization Low3.8EPSS 0.3%2026-09-16CVE Database V5CVE-2026-87026 CVE-2026-87026 is a low-severity vulnerability in Tanium Threat Response involving missing authorization controls. It allows users with high privileges to potentially access resources improperly. Tanium has addressed this issue in specific patched versions. EPSS 0.3%Vulnerability #ghsa-hx2p-hm52-j526	CVE Database V5	2026-09-16
Medium	6.3	EPSS 0.3%	CVE-2026-87113Tanium Threat Response · Insecure Direct Object Reference Medium6.3EPSS 0.3%2026-09-16CVE Database V5CVE-2026-87113 CVE-2026-87113 is an authorization bypass vulnerability in Tanium Threat Response caused by improper access controls related to user-controlled keys. This flaw allows an attacker with limited privileges to potentially gain unauthorized access or perform unauthorized actions. Tanium has addressed this vulnerability in specific patched versions. EPSS 0.3%Vulnerability #ghsa-x4m7-w7jf-mj86	CVE Database V5	2026-09-16
High	8.8	EPSS 0.4%	CVE-2026-87105Tanium Threat Response · SQL Injection High8.8EPSS 0.4%2026-09-16CVE Database V5CVE-2026-87105 A SQL injection vulnerability was identified and addressed in Tanium Threat Response. This vulnerability allows improper neutralization of special elements used in SQL commands, potentially enabling unauthorized database access or manipulation. The issue affects specific versions of the product prior to fixed releases. EPSS 0.4%Vulnerability #ghsa-ppx7-gfch-p72q	CVE Database V5	2026-09-16
Medium	6.5	EPSS 0.3%	CVE-2026-87116Tanium Threat Response · Server-Side Request Forgery (SSRF) Medium6.5EPSS 0.3%2026-09-16CVE Database V5CVE-2026-87116 A server-side request forgery (SSRF) vulnerability was identified and addressed in Tanium Threat Response. This vulnerability affects specific versions prior to fixed releases. The CVSS score is 6.5, indicating a medium severity level. The vulnerability allows an attacker with low privileges to cause the server to make unauthorized requests, potentially exposing sensitive information. No known exploits are reported in the wild. Tanium has released fixes for the affected versions. EPSS 0.3%Vulnerability #ghsa-g6ff-7f49-6527	CVE Database V5	2026-09-16
High	7.2	EPSS 0.4%	CVE-2026-87024Tanium Asset · SQL Injection High7.2EPSS 0.4%2026-09-16CVE Database V5CVE-2026-87024 A SQL injection vulnerability (CVE-2026-87024) was identified and addressed in Tanium Asset. This vulnerability allows improper neutralization of special elements in SQL commands, potentially leading to unauthorized data access or modification. It affects specific versions of Tanium Asset prior to fixed releases. The vulnerability has a high severity rating with a CVSS score of 7.2. EPSS 0.4%Vulnerability #ghsa-2jx4-xhg9-69q9	CVE Database V5	2026-09-16
Medium	6.5	EPSS 0.4%	CVE-2026-87076Tanium Discover · Information Exposure Medium6.5EPSS 0.4%2026-09-16CVE Database V5CVE-2026-87076 An information disclosure vulnerability (CVE-2026-87076) was identified and addressed in Tanium Discover. This flaw could allow unauthorized actors to access sensitive information. The vulnerability affects specific versions of Tanium Discover prior to fixed releases. The CVSS score is 6.5, indicating a medium severity level. No known exploits are reported in the wild. The vulnerability does not impact cloud services and requires local privileges to exploit. EPSS 0.4%Vulnerability #ghsa-3p85-82gq-6c7j	CVE Database V5	2026-09-16
High	7.2	EPSS 0.4%	CVE-2026-86865Tanium Asset · SQL Injection High7.2EPSS 0.4%2026-09-16CVE Database V5CVE-2026-86865 CVE-2026-86865 is a high-severity SQL injection vulnerability in Tanium Asset. It allows improper neutralization of special elements in SQL commands, potentially leading to full compromise of confidentiality, integrity, and availability. The vulnerability affects specific versions prior to fixed releases. Tanium has addressed this issue in later versions. EPSS 0.4%Vulnerability #ghsa-f4p5-qmg7-r4m5	CVE Database V5	2026-09-16
High	8.1	EPSS 0.4%	CVE-2026-87036Tanium Comply · Missing Authorization High8.1EPSS 0.4%2026-09-09CVE Database V5CVE-2026-87036 Tanium addressed an improper access controls vulnerability in Comply. EPSS 0.4%Vulnerability #ghsa-2frf-jx9j-3pc4	CVE Database V5	2026-09-09
High	7.2	EPSS 0.7%	CVE-2026-87021Tanium Comply · Template Injection High7.2EPSS 0.7%2026-09-09CVE Database V5CVE-2026-87021 Tanium addressed an unauthorized code execution vulnerability in Comply. EPSS 0.7%Vulnerability #ghsa-37q3-xf78-2773	CVE Database V5	2026-09-09
High	8.5	EPSS 0.5%	CVE-2026-87023Tanium Comply · Path Traversal High8.5EPSS 0.5%2026-09-09CVE Database V5CVE-2026-87023 Tanium addressed a path traversal vulnerability in Comply. EPSS 0.5%Vulnerability #ghsa-q293-753h-cmv4	CVE Database V5	2026-09-09
High	7.7	EPSS 0.3%	CVE-2026-87084Tanium Enforce · Server-Side Request Forgery (SSRF) High7.7EPSS 0.3%2026-09-09CVE Database V5CVE-2026-87084 Tanium addressed a server-side request forgery vulnerability in Enforce. EPSS 0.3%Vulnerability #ghsa-vp3r-9rfc-jxq2	CVE Database V5	2026-09-09
Medium	5.4	EPSS 0.3%	CVE-2026-87048Tanium Comply · Missing Authorization Medium5.4EPSS 0.3%2026-09-09CVE Database V5CVE-2026-87048 Tanium addressed an improper access controls vulnerability in Comply. EPSS 0.3%Vulnerability #ghsa-qc79-3chv-pjvq	CVE Database V5	2026-09-09
High	8.3	EPSS 0.3%	CVE-2026-87034Tanium Comply · SQL Injection High8.3EPSS 0.3%2026-09-09CVE Database V5CVE-2026-87034 Tanium addressed a SQL injection vulnerability in Comply. EPSS 0.3%Vulnerability #ghsa-hcgr-wjfq-r6mp	CVE Database V5	2026-09-09
Medium	6.5	EPSS 0.3%	CVE-2026-87073Tanium Comply · Missing Authorization Medium6.5EPSS 0.3%2026-09-09CVE Database V5CVE-2026-87073 Tanium addressed an improper access controls vulnerability in Comply. EPSS 0.3%Vulnerability #ghsa-jh9j-ccjj-r4xm	CVE Database V5	2026-09-09
Medium	4.3	EPSS 0.3%	CVE-2026-87032Tanium Server · Information Exposure Medium4.3EPSS 0.3%2026-09-09CVE Database V5CVE-2026-87032 Tanium addressed an information disclosure vulnerability in Tanium Server. EPSS 0.3%Vulnerability #ghsa-5rmc-7g9g-gv7p	CVE Database V5	2026-09-09
High	7.1	EPSS 0.3%	CVE-2026-87072Tanium Comply · Missing Authorization High7.1EPSS 0.3%2026-09-09CVE Database V5CVE-2026-87072 Tanium addressed an improper access controls vulnerability in Comply. EPSS 0.3%Vulnerability #ghsa-gpcv-hxc6-h22w	CVE Database V5	2026-09-09
Medium	4.3	EPSS 0.3%	CVE-2026-87035Tanium Comply · Information Exposure Medium4.3EPSS 0.3%2026-09-09CVE Database V5CVE-2026-87035 Tanium addressed an information disclosure vulnerability in Comply. EPSS 0.3%Vulnerability #ghsa-5ghj-5rj5-22mv	CVE Database V5	2026-09-09
Medium	5.4	EPSS 0.3%	CVE-2026-87033Tanium Comply · Insecure Direct Object Reference Medium5.4EPSS 0.3%2026-09-09CVE Database V5CVE-2026-87033 Tanium addressed an improper access controls vulnerability in Comply. EPSS 0.3%Vulnerability #ghsa-fmrc-xmvq-7v6q	CVE Database V5	2026-09-09
Medium	4.3	EPSS 0.3%	CVE-2026-14892Tanium Server · Incorrect Authorization Medium4.3EPSS 0.3%2026-09-09CVE Database V5CVE-2026-14892 Tanium addressed an improper access controls vulnerability in Tanium Server. EPSS 0.3%Vulnerability #ghsa-g629-hjx7-hrrr	CVE Database V5	2026-09-09
High	8.5	EPSS 0.4%	CVE-2026-87030Tanium Comply · Path Traversal High8.5EPSS 0.4%2026-09-09CVE Database V5CVE-2026-87030 Tanium addressed a path traversal vulnerability in Comply. EPSS 0.4%Vulnerability #ghsa-hg66-2gc7-f9c8	CVE Database V5	2026-09-09

Page 1 of 5