CVE-2026-116666

MediumCVSS 4.3/10Last modified Nov 6, 2026

Description

Tanium addressed an information disclosure vulnerability in Discover.

Metrics

CVSS 3.1 4.3/10CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

Weakness enumeration

CWE-200

Affected software

VendorProductVersions
TaniumDiscover>= 4.19.0, < 4.19.137; >= 4.15.0, < 4.15.218; >= 4.10.0, < 4.10.204

References

Timeline

Published
Nov 3, 2026
Last modified
Nov 6, 2026
NVD status
Analyzed

Related CVEs from 2026

CVE-2026-1166674.2Tanium addressed an improper access controls vulnerability in Discover.CVE-2026-1166684.3Tanium addressed an uncontrolled resource consumption vulnerability in Discover.CVE-2026-1166696.5Tanium addressed an improper access controls vulnerability in Discover.CVE-2026-116677.5Out of bounds read in WebRTC in Google Chrome prior to 149.0.7827.103 allowed a remote attacker who had compromised the GPU process to potenCVE-2026-1166712.1Infinite loop in Xpdf 4.06 and earlier, due to incorrect validation of progression order field in JPEG 2000 image.CVE-2026-1166728.8Authlib is a Python library which builds OAuth and OpenID Connect servers. From 0.15 until 1.9.1, the documented ClientConfigurationEndpointCVE-2026-1166733.3systeminformation is a System and OS information library for node.js. Prior to 5.33.14, the Linux networkStats(iface) implementation uses thCVE-2026-1166746.5systeminformation is a System and OS information library for node.js. Prior to 5.33.13, networkStats(ifaces) in lib/network.js on FreeBSD, OCVE-2026-1166758.5TinyMCE is an open source rich text editor. From 7.9.3 until 7.9.4 and from 8.5.1 until 8.9.3, the media plugin creates elements crafted thrCVE-2026-1166768.8Atlantis is a self-hosted golang application that listens for Terraform pull request events via webhooks. From version 0.4.0 until 0.47.1, ACVE-2026-1166775.3OpenWISP Controller is a network and WiFi controller for provisioning, configuration management, updates, and PKI management. From 1.0.0 untCVE-2026-1166785.8Vaultwarden is a Bitwarden-compatible server written in Rust. Prior to version 1.37.0, the Vaultwarden icon downloader validates the initial
CVE-2026-116666: Medium severity, CVSS 4.3 | Vulnix