Description
Tanium addressed an improper certificate validation vulnerability in multiple products. Products have been updated to distrust several intermediate CA certificates associated with compromised private keys.
Metrics
CVSS 3.1 7.4/10
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:NWeakness enumeration
Affected software
Source: the vendor's advisory (CNA). NVD analysis pending.
| Vendor | Product | Versions |
|---|---|---|
| Tanium | TanOS | >= 1.8.5, < 1.8.5.0326; >= 1.8.6, < 1.8.6.0193; >= 1.9.0, < 1.9.0.0089 |
| Tanium | Asset | >= 1.33, < 1.33.334; >= 1.36, < 1.36.182; >= 1.39, < 1.39.164 |
| Tanium | Comply | >= 2.32, < 2.32.275; >= 2.35, < 2.35.337; >= 2.37, < 2.37.347 |
| Tanium | Connect | >= 5.29, < 5.29.272; >= 5.37, < 5.37.177; >= 5.47, < 5.47.135 |
| Tanium | Integrity Monitor | >= 3.6, < 3.6.608; >= 3.7, < 3.7.383; >= 3.8, < 3.8.362 |
| Tanium | Health Check | >= 1.13, < 1.13.653 |
| Tanium | Endpoint Configuration Toolset Solution | >= 1.51, < 1.51.61; >= 1.59, < 1.59.51; >= 1.71, < 1.71.26 |
| Tanium | Patch | >= 3.24, < 3.24.328; >= 3.28, < 3.28.346; >= 3.32, < 3.32.383 |
| Tanium | Performance | >= 1.22, < 1.22.355; >= 1.23, < 1.23.318; >= 1.25, < 1.25.196 |
| Tanium | Reputation | >= 6.6, < 6.6.150; >= 6.7, < 6.7.143; >= 6.8, < 6.8.167 |
| Tanium | Reveal | >= 2.4, < 2.4.109; >= 2.5, < 2.5.166 |
| Tanium | Threat Response | >= 4.9, < 4.9.480; >= 4.12, < 4.12.353; >= 4.17, < 4.17.333 |
| Tanium | Provision Host | >= 10.4.100, < 10.4.100; >= 10.8.115, < 10.8.115; >= 10.9.113, < 10.9.113; >= 10.10.189, < 10.10.189; >= 10.11.127, < 10.11.127 |
References
Timeline
- Published
- Nov 3, 2026
- Last modified
- Nov 6, 2026
- NVD status
- Awaiting Analysis