Tanium vulnerabilities
Published CVEs affecting Tanium products: 86 record(s), with severity, exploitation and fixes.
Comply 17Threat Response 11Server 10Tanos 6Discover 5Tanium Appliance 4Interact 4Asset 4Connect 4Enforce 4Patch 3Patch Endpoint Tools 2Deploy 2Module Server 2Tanium Data Service 1Benchmark 1Reputation 1Tanium 1TDS 1Tanium Client 1End-User Notifications Endpoint Tools 1Findings 1Partner Integration 1Performance 1Engage 1Cloud Workloads 1Trends 1Enforce Recovery Key Portal 1End-user-cx 1Euss 1Endpoint Configuration Toolset Solution 1End-user Notifications 1
CVE-2026-87019
Medium · 4.3
CWE-639 Sep 9, 2026
Tanium addressed an improper access controls vulnerability in Comply.
Tanium addressed an improper access controls vulnerability in Comply.
CVE-2026-14892
Medium · 4.3
CWE-863 Sep 9, 2026
Tanium addressed an improper access controls vulnerability in Tanium Server.
Tanium addressed an improper access controls vulnerability in Tanium Server.
CVE-2026-14505
Medium · 6.6
CWE-22 Sep 9, 2026
Tanium addressed a path traversal vulnerability in Tanium Data Service.
Tanium addressed a path traversal vulnerability in Tanium Data Service.
CVE-2026-75476
Low · 3.1
CWE-409 Aug 19, 2026
Tanium addressed a compression bomb vulnerability in Threat Response.
Tanium addressed a compression bomb vulnerability in Threat Response.
CVE-2026-11617
Low · 3.1
CWE-409 Aug 19, 2026
Tanium addressed a compression bomb vulnerability in Findings.
Tanium addressed a compression bomb vulnerability in Findings.
CVE-2026-11391
Medium · 6.3
CWE-89 Jul 28, 2026
Tanium addressed a SQL injection vulnerability in Patch.
Tanium addressed a SQL injection vulnerability in Patch.
CVE-2026-12139
Medium · 5.5
CWE-214 Jul 21, 2026
Tanium addressed an information disclosure vulnerability in Connect.
Tanium addressed an information disclosure vulnerability in Connect.
CVE-2026-11925
Low · 2.7
CWE-451 Jul 21, 2026
Tanium addressed a User Interface (UI) Misrepresentation of Critical Information vulnerability in Tanium Server.
Tanium addressed a User Interface (UI) Misrepresentation of Critical Information vulnerability in Tanium Server.
CVE-2026-15053
High · 7.5
CWE-789 Jul 8, 2026
Tanium addressed a denial of service vulnerability in Tanium Server.
Tanium addressed a denial of service vulnerability in Tanium Server.
CVE-2026-9208
High · 8.8
CWE-78 May 27, 2026
Tanium addressed an unauthorized code execution vulnerability in Connect.
Tanium addressed an unauthorized code execution vulnerability in Connect.
CVE-2026-9207
High · 8.8
CWE-78 May 26, 2026
Tanium addressed an unauthorized code execution vulnerability in Connect.
Tanium addressed an unauthorized code execution vulnerability in Connect.
CVE-2026-9156
High · 7.5
CWE-772 May 26, 2026
Tanium addressed a denial of service vulnerability in Tanium Server.
Tanium addressed a denial of service vulnerability in Tanium Server.
CVE-2026-6416
Medium · 4.9
CWE-400 Apr 22, 2026
Tanium addressed an uncontrolled resource consumption vulnerability in Interact.
Tanium addressed an uncontrolled resource consumption vulnerability in Interact.
CVE-2026-6408
Low · 2.7
CWE-522 Apr 22, 2026
Tanium addressed an information disclosure vulnerability in Tanium Server.
Tanium addressed an information disclosure vulnerability in Tanium Server.
CVE-2026-6392
Low · 2.7
CWE-200 Apr 22, 2026
Tanium addressed an information disclosure vulnerability in Threat Response.
Tanium addressed an information disclosure vulnerability in Threat Response.
CVE-2026-2605
Medium · 5.3
CWE-532 Feb 19, 2026
Tanium addressed an insertion of sensitive information into log file vulnerability in TanOS.
Tanium addressed an insertion of sensitive information into log file vulnerability in TanOS.
CVE-2026-2435
High · 8.8
CWE-89 Feb 19, 2026
ASSET-7706
Tanium addressed a SQL injection vulnerability in Asset.
CVE-2026-2408
Medium · 4.7
CWE-416 Feb 19, 2026
Use-after-free in Cloud Workloads
Tanium addressed a use-after-free vulnerability in the Cloud Workloads Enforce client extension.
CVE-2026-2350
Medium · 6.5
CWE-532 Feb 19, 2026
Tanium addressed an insertion of sensitive information into log file vulnerability in Interact and TDS.
Tanium addressed an insertion of sensitive information into log file vulnerability in Interact and TDS.
CVE-2026-1292
Medium · 6.5
CWE-532 Feb 19, 2026
Tanium addressed an insertion of sensitive information into log file vulnerability in Trends.
Tanium addressed an insertion of sensitive information into log file vulnerability in Trends.
CVE-2026-1344
Medium · 5.5
CWE-732 Feb 17, 2026
Insecure file permissions in Enforce Recovery Key Portal
Tanium addressed an insecure file permissions vulnerability in Enforce Recovery Key Portal.
CVE-2025-15314
High · 8.1
CWE-59 Feb 9, 2026
Tanium addressed an arbitrary file deletion vulnerability in end-user-cx.
Tanium addressed an arbitrary file deletion vulnerability in end-user-cx.
CVE-2025-15313
High · 7.1
CWE-59 Feb 9, 2026
Tanium addressed an arbitrary file deletion vulnerability in Tanium EUSS.
Tanium addressed an arbitrary file deletion vulnerability in Tanium EUSS.
CVE-2025-15310
High · 7.8
CWE-59 Feb 9, 2026
Tanium addressed a local privilege escalation vulnerability in Patch Endpoint Tools.
Tanium addressed a local privilege escalation vulnerability in Patch Endpoint Tools.
CVE-2025-15319
High · 7.8
CWE-59 Feb 9, 2026
Tanium addressed a local privilege escalation vulnerability in Patch Endpoint Tools.
Tanium addressed a local privilege escalation vulnerability in Patch Endpoint Tools.