CVE-2026-14892

MediumCVSS 4.3/10Last modified Sep 9, 2026

Description

Tanium addressed an improper access controls vulnerability in Tanium Server.

Metrics

CVSS 3.1 4.3/10CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L

Weakness enumeration

CWE-863

Affected software

Source: the vendor's advisory (CNA). NVD analysis pending.

No affected versions have been published.

Timeline

Published
Sep 9, 2026
Last modified
Sep 9, 2026
NVD status
Awaiting Analysis

Related CVEs from 2026

CVE-2026-148937.3IBM Observability with Instana (Agent) Build 1.0.303 through 1.0.320 IBM Instana Node.js tracer component @instana/core version 6.2.1 is vulCVE-2026-148949.8The Super Forms – Drag & Drop Form Builder plugin for WordPress is vulnerable to Arbitrary File Upload in all versions up to, and including,CVE-2026-148957.5String::Util versions before 1.36 for Perl are susceptible to a regular expression denial of service. The trim and rtrim functions strippedCVE-2026-148964.2HashiCorp Nomad and Nomad Enterprise are vulnerable to a cross-namespace authorization bypass in the dynamic host volumes feature that may aCVE-2026-148986.5The OpenAI Codex desktop app for macOS rendered remote images from Markdown in model responses. An attacker who could place an indirect promCVE-2026-148997.5The code to parse MIME headers for display when forwarding a message (if the setting to view all headers was enabled) had an off-by-one erroCVE-2026-14909.8The Spam protection, Anti-Spam, FireWall by CleanTalk plugin for WordPress is vulnerable to unauthorized Arbitrary Plugin Installation due tCVE-2026-149009.8The Cost Calculator Builder PRO plugin for WordPress is vulnerable to Remote Code Execution in all versions up to, and including, 4.0.3 via CVE-2026-149026.1An open redirect in Ivanti Xtraction before version 2026.2.1 allows a remote unauthenticated attacker to redirect users to arbitrary externaCVE-2026-149036.5Path traversal in Ivanti  Xtraction before version 2026.2.1 allows a remote authenticated attacker to read arbitrary files outside the web rCVE-2026-149046.5AWS Research and Engineering Studio (RES) is an open-source solution that enables researchers and engineers to create and manage secure virtCVE-2026-149058.2IBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.0 through 10.6.0.10, and 11.0.0.0 through 11.0.0.2 is vulner
CVE-2026-14892: Medium severity, CVSS 4.3 | Vulnix