CVE-2026-108325

MediumCVSS 6.6/10Last modified Nov 4, 2026

Description

Tanium addressed an insertion of sensitive information into log file vulnerability in Reputation.

Metrics

CVSS 3.1 6.6/10CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-532

Affected software

Source: the vendor's advisory (CNA). NVD analysis pending.

VendorProductVersions
TaniumReputation>= 6.6, < 6.6.145; >= 6.7, < 6.7.138; >= 6.8, < 6.8.162

References

Timeline

Published
Oct 27, 2026
Last modified
Nov 4, 2026
NVD status
Awaiting Analysis

Related CVEs from 2026

CVE-2026-1083266.5Tanium addressed an improper certificate validation vulnerability in Stream Client Extension.CVE-2026-1083275.0Tanium addressed a path traversal vulnerability in Tanium Data Service.CVE-2026-1083284.2Tanium addressed an insertion of sensitive information into log file vulnerability in Threat Response.CVE-2026-1083298.8Tanium addressed an unauthorized code execution vulnerability in Threat Response.CVE-2026-108336.4The Gutenberg Essential Blocks – Page Builder for Gutenberg Blocks & Patterns plugin for WordPress is vulnerable to Stored Cross-Site ScriptCVE-2026-1083303.6Tanium addressed an information disclosure vulnerability in Threat Response Client Extension.CVE-2026-1083313.3Tanium addressed an infinite loop vulnerability in Threat Response Client Extension.CVE-2026-1083326.3Tanium addressed an improper link resolution before file access vulnerability in Threat Response Client Extension.CVE-2026-1083332.5Tanium addressed a use-after-free vulnerability in Threat Response Client Extension.CVE-2026-1083347.4A flaw was found in the internal WebAssembly (WASM) shim used by the Kuadrant operator. When generating the CEL predicate that determines whCVE-2026-1083359.1When the password reset functionality is enabled, and email is configured, an attacker could take over any account using a brute-force attacCVE-2026-1083369.1When the default self-signed certificate is used, an attacker could gain administrative access to the application. The SSL certificate fo
CVE-2026-108325: Medium severity, CVSS 6.6 | Vulnix