Skip to content
OpenAdvisories
High WID-SEC-2026-4207 28 CVEs

Tanium Endpoint Management: Mehrere Schwachstellen

Published Oct 27, 2026 · Updated Oct 27, 2026 · de-DE

Vendor: Tanium Product: Endpoint Management Platform: Linux Platform: Windows

Summary

Ein Angreifer kann mehrere Schwachstellen in Tanium Endpoint Management ausnutzen, um beliebigen Programmcode auszuführen, um seine Privilegien zu erhöhen, um einen Denial of Service Angriff durchzuführen, um Informationen offenzulegen, um Dateien zu manipulieren, um einen SQL-Injection Angriff durchzuführen und um Sicherheitsvorkehrungen zu umgehen.

Product

Tanium Endpoint Management bietet Echtzeit-Sichtbarkeit und Kontrolle über alle Endpunkte in einer IT-Umgebung.

Vulnerabilities 28

  • High 8.8
    CVE-2026-108303

    Tanium addressed an unauthorized code execution vulnerability in Certificate Manager.

    Tanium addressed an unauthorized code execution vulnerability in Certificate Manager.

    Tanium Certificate Manager
  • High 8.8
    CVE-2026-108329

    Tanium addressed an unauthorized code execution vulnerability in Threat Response.

    Tanium addressed an unauthorized code execution vulnerability in Threat Response.

    Tanium Threat Response
  • High 7.8
    CVE-2026-108304

    Tanium addressed a local privilege escalation vulnerability in End-User Notifications.

    Tanium addressed a local privilege escalation vulnerability in End-User Notifications.

    Tanium Endpoint Configuration Toolset Solution end-user-cx
  • High 7.8
    CVE-2026-108305

    Tanium addressed a local privilege escalation vulnerability in End-User Notifications.

    Tanium addressed a local privilege escalation vulnerability in End-User Notifications.

    Tanium Endpoint Configuration Toolset Solution end-user-cx
  • High 7.8
    CVE-2026-108306

    Tanium addressed a local privilege escalation vulnerability in End-User Notifications.

    Tanium addressed a local privilege escalation vulnerability in End-User Notifications.

    Tanium Endpoint Configuration Toolset Solution end-user-cx
  • High 7.8
    CVE-2026-108307

    Tanium addressed a heap-based buffer overflow vulnerability in Index.

    Tanium addressed a heap-based buffer overflow vulnerability in Index.

    Tanium Endpoint Configuration Toolset Solution index-cx
  • High 7.5
    CVE-2026-116656

    Tanium addressed an uncontrolled resource consumption vulnerability in Enforce.

    Tanium addressed an uncontrolled resource consumption vulnerability in Enforce.

    Tanium Enforce
  • High 7.5
    CVE-2026-116662

    Tanium addressed a compression bomb vulnerability in Enforce.

    Tanium addressed a compression bomb vulnerability in Enforce.

    Tanium Enforce
  • High 7.5
    CVE-2026-87086

    Tanium addressed a denial of service vulnerability in Provision.

    Tanium addressed a denial of service vulnerability in Provision.

    Tanium Provision
  • High 7.1
    CVE-2026-116647

    Tanium addressed an improper output sanitization vulnerability in Comply.

    Tanium addressed an improper output sanitization vulnerability in Comply.

    Tanium Comply
  • High 7.1
    CVE-2026-116649

    Tanium addressed an improper output sanitization vulnerability in Enforce.

    Tanium addressed an improper output sanitization vulnerability in Enforce.

    Tanium Enforce
  • Medium 6.6
    CVE-2026-108325

    Tanium addressed an insertion of sensitive information into log file vulnerability in Reputation.

    Tanium addressed an insertion of sensitive information into log file vulnerability in Reputation.

    Tanium Reputation
  • Medium 6.5
    CVE-2026-108308

    Tanium addressed a SQL injection vulnerability in Patch.

    Tanium addressed a SQL injection vulnerability in Patch.

    Tanium Patch
  • Medium 6.5
    CVE-2026-108326

    Tanium addressed an improper certificate validation vulnerability in Stream Client Extension.

    Tanium addressed an improper certificate validation vulnerability in Stream Client Extension.

    Tanium Endpoint Configuration Toolset Solution cx-stream
  • Medium 6.5
    CVE-2026-116658

    Tanium addressed a denial of service vulnerability in Enforce.

    Tanium addressed a denial of service vulnerability in Enforce.

    Tanium Enforce
  • Medium 6.0
    CVE-2026-108301

    Tanium addressed an improper access controls vulnerability in Comply.

    Tanium addressed an improper access controls vulnerability in Comply.

    Tanium Comply
  • Medium 5.5
    CVE-2026-108309

    Tanium addressed an uncontrolled resource consumption vulnerability in Performance Client Extension.

    Tanium addressed an uncontrolled resource consumption vulnerability in Performance Client Extension.

    Tanium Endpoint Configuration Toolset Solution performance-cx
  • Medium 5.3
    CVE-2026-108310

    Tanium addressed a denial of service vulnerability in Tanium Server.

    Tanium addressed a denial of service vulnerability in Tanium Server.

    Tanium Tanium Server
  • Medium 5.3
    CVE-2026-116657

    Tanium addressed a denial of service vulnerability in Enforce.

    Tanium addressed a denial of service vulnerability in Enforce.

    Tanium Enforce
  • Medium 4.3
    CVE-2026-108302

    Tanium addressed an improper access controls vulnerability in Comply.

    Tanium addressed an improper access controls vulnerability in Comply.

    Tanium Comply
  • Medium 4.3
    CVE-2026-108316

    Tanium addressed an information disclosure vulnerability in Tanium Server.

    Tanium addressed an information disclosure vulnerability in Tanium Server.

    Tanium Tanium Server
  • Medium 4.3
    CVE-2026-116659

    Tanium addressed an uncontrolled resource consumption vulnerability in Enforce.

    Tanium addressed an uncontrolled resource consumption vulnerability in Enforce.

    Tanium Enforce
  • Medium 4.3
    CVE-2026-116660

    Tanium addressed an improper access controls vulnerability in Enforce.

    Tanium addressed an improper access controls vulnerability in Enforce.

    Tanium Enforce
  • Medium 4.2
    CVE-2026-108328

    Tanium addressed an insertion of sensitive information into log file vulnerability in Threat Response.

    Tanium addressed an insertion of sensitive information into log file vulnerability in Threat Response.

    Tanium Threat Response
  • Low 3.6
    CVE-2026-108330

    Tanium addressed an information disclosure vulnerability in Threat Response Client Extension.

    Tanium addressed an information disclosure vulnerability in Threat Response Client Extension.

    Tanium Endpoint Configuration Toolset Solution threat-response-cx
  • Low 3.3
    CVE-2026-108331

    Tanium addressed an infinite loop vulnerability in Threat Response Client Extension.

    Tanium addressed an infinite loop vulnerability in Threat Response Client Extension.

    Tanium Endpoint Configuration Toolset Solution threat-response-cx
  • Low 2.7
    CVE-2026-108311

    Tanium addressed an insufficient logging vulnerability in Tanium Server.

    Tanium addressed an insufficient logging vulnerability in Tanium Server.

    Tanium Tanium Server
  • Low 2.5
    CVE-2026-108333

    Tanium addressed a use-after-free vulnerability in Threat Response Client Extension.

    Tanium addressed a use-after-free vulnerability in Threat Response Client Extension.

    Tanium Endpoint Configuration Toolset Solution threat-response-cx

Revision history

  1. #1

    Initiale Fassung

References