First day on Intigriti: our agent harness found and proved a remote code execution bug in Odoo's program.

CVE-2026-116648

MediumCVSS 4.1/10Last modified Nov 6, 2026

Description

Tanium addressed an improper output sanitization vulnerability in Discover.

Metrics

CVSS 3.1 4.1/10CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:N/I:N/A:L

Weakness enumeration

Affected software

Vendor	Product	Versions
Tanium	Discover	>= 4.19.0, < 4.19.137; >= 4.15.0, < 4.15.218; >= 4.10.0, < 4.10.204

References

https://security.tanium.com/TAN-2026-084Vendor Advisory

Timeline

Published: Nov 3, 2026
Last modified: Nov 6, 2026
NVD status: Analyzed

Related CVEs from 2026

CVE-2026-1166497.1Tanium addressed an improper output sanitization vulnerability in Enforce.CVE-2026-116654.3Out of bounds read in Dawn in Google Chrome on Windows prior to 149.0.7827.103 allowed a remote attacker to leak cross-origin data via a cra CVE-2026-1166507.5Tanium addressed an unauthorized code execution vulnerability in Threat Response.CVE-2026-1166517.5Tanium addressed an unauthorized code execution vulnerability in Threat Response.CVE-2026-1166524.3Tanium addressed a business logic error in Threat Response.CVE-2026-1166534.3Tanium addressed an improper input validation vulnerability in Threat Response.CVE-2026-1166546.5Tanium addressed an improper input validation vulnerability in Threat Response.CVE-2026-1166567.5Tanium addressed an uncontrolled resource consumption vulnerability in Enforce.CVE-2026-1166575.3Tanium addressed a denial of service vulnerability in Enforce.CVE-2026-1166586.5Tanium addressed a denial of service vulnerability in Enforce.CVE-2026-1166594.3Tanium addressed an uncontrolled resource consumption vulnerability in Enforce.CVE-2026-116665.4Insufficient validation of untrusted input in Input in Google Chrome prior to 149.0.7827.103 allowed a remote attacker to perform UI spoofin

CVE-2026-116648: Medium severity, CVSS 4.1 | Vulnix