CVE-2026-121565
Full vulnerability record from the local CVENow database.
Description
Tanium addressed an improper certificate validation vulnerability in multiple products. Products have been updated to distrust several intermediate CA certificates associated with compromised private keys.
Severity
HIGH
CVSS score
7.4
(v3.1)
Vulnerability status
Awaiting Analysis
Source identifier
3938794e-25f5-4123-a1ba-5cbd7f104512
Published
2026-11-03 23:17:35.080000
Last modified
2026-11-03 23:17:35.203000
View original CVE JSON
{
"id": "CVE-2026-121565",
"sourceIdentifier": "3938794e-25f5-4123-a1ba-5cbd7f104512",
"published": "2026-11-03T23:17:35.080",
"lastModified": "2026-11-03T23:17:35.203",
"vulnStatus": "Awaiting Analysis",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "Tanium addressed an improper certificate validation vulnerability in multiple products. Products have been updated to distrust several intermediate CA certificates associated with compromised private keys."
}
],
"affected": [
{
"source": "3938794e-25f5-4123-a1ba-5cbd7f104512",
"affectedData": [
{
"vendor": "Tanium",
"product": "TanOS",
"versions": [
{
"version": "1.8.5",
"lessThan": "1.8.5.0326",
"versionType": "custom",
"status": "affected"
},
{
"version": "1.8.6",
"lessThan": "1.8.6.0193",
"versionType": "custom",
"status": "affected"
},
{
"version": "1.9.0",
"lessThan": "1.9.0.0089",
"versionType": "custom",
"status": "affected"
}
]
},
{
"vendor": "Tanium",
"product": "Asset",
"versions": [
{
"version": "1.33",
"lessThan": "1.33.334",
"versionType": "custom",
"status": "affected"
},
{
"version": "1.36",
"lessThan": "1.36.182",
"versionType": "custom",
"status": "affected"
},
{
"version": "1.39",
"lessThan": "1.39.164",
"versionType": "custom",
"status": "affected"
}
]
},
{
"vendor": "Tanium",
"product": "Comply",
"versions": [
{
"version": "2.32",
"lessThan": "2.32.275",
"versionType": "custom",
"status": "affected"
},
{
"version": "2.35",
"lessThan": "2.35.337",
"versionType": "custom",
"status": "affected"
},
{
"version": "2.37",
"lessThan": "2.37.347",
"versionType": "custom",
"status": "affected"
}
]
},
{
"vendor": "Tanium",
"product": "Connect",
"versions": [
{
"version": "5.29",
"lessThan": "5.29.272",
"versionType": "custom",
"status": "affected"
},
{
"version": "5.37",
"lessThan": "5.37.177",
"versionType": "custom",
"status": "affected"
},
{
"version": "5.47",
"lessThan": "5.47.135",
"versionType": "custom",
"status": "affected"
}
]
},
{
"vendor": "Tanium",
"product": "Integrity Monitor",
"versions": [
{
"version": "3.6",
"lessThan": "3.6.608",
"versionType": "custom",
"status": "affected"
},
{
"version": "3.7",
"lessThan": "3.7.383",
"versionType": "custom",
"status": "affected"
},
{
"version": "3.8",
"lessThan": "3.8.362",
"versionType": "custom",
"status": "affected"
}
]
},
{
"vendor": "Tanium",
"product": "Health Check",
"versions": [
{
"version": "1.13",
"lessThan": "1.13.653",
"versionType": "custom",
"status": "affected"
}
]
},
{
"vendor": "Tanium",
"product": "Endpoint Configuration Toolset Solution",
"versions": [
{
"version": "1.51",
"lessThan": "1.51.61",
"versionType": "custom",
"status": "affected"
},
{
"version": "1.59",
"lessThan": "1.59.51",
"versionType": "custom",
"status": "affected"
},
{
"version": "1.71",
"lessThan": "1.71.26",
"versionType": "custom",
"status": "affected"
}
]
},
{
"vendor": "Tanium",
"product": "Patch",
"versions": [
{
"version": "3.24",
"lessThan": "3.24.328",
"versionType": "custom",
"status": "affected"
},
{
"version": "3.28",
"lessThan": "3.28.346",
"versionType": "custom",
"status": "affected"
},
{
"version": "3.32",
"lessThan": "3.32.383",
"versionType": "custom",
"status": "affected"
}
]
},
{
"vendor": "Tanium",
"product": "Performance",
"versions": [
{
"version": "1.22",
"lessThan": "1.22.355",
"versionType": "custom",
"status": "affected"
},
{
"version": "1.23",
"lessThan": "1.23.318",
"versionType": "custom",
"status": "affected"
},
{
"version": "1.25",
"lessThan": "1.25.196",
"versionType": "custom",
"status": "affected"
}
]
},
{
"vendor": "Tanium",
"product": "Reputation",
"versions": [
{
"version": "6.6",
"lessThan": "6.6.150",
"versionType": "custom",
"status": "affected"
},
{
"version": "6.7",
"lessThan": "6.7.143",
"versionType": "custom",
"status": "affected"
},
{
"version": "6.8",
"lessThan": "6.8.167",
"versionType": "custom",
"status": "affected"
}
]
},
{
"vendor": "Tanium",
"product": "Reveal",
"versions": [
{
"version": "2.4",
"lessThan": "2.4.109",
"versionType": "custom",
"status": "affected"
},
{
"version": "2.5",
"lessThan": "2.5.166",
"versionType": "custom",
"status": "affected"
}
]
},
{
"vendor": "Tanium",
"product": "Threat Response",
"versions": [
{
"version": "4.9",
"lessThan": "4.9.480",
"versionType": "custom",
"status": "affected"
},
{
"version": "4.12",
"lessThan": "4.12.353",
"versionType": "custom",
"status": "affected"
},
{
"version": "4.17",
"lessThan": "4.17.333",
"versionType": "custom",
"status": "affected"
}
]
},
{
"vendor": "Tanium",
"product": "Provision Host",
"versions": [
{
"version": "10.4.100",
"lessThan": "10.4.100",
"versionType": "semver",
"status": "affected"
},
{
"version": "10.8.115",
"lessThan": "10.8.115",
"versionType": "semver",
"status": "affected"
},
{
"version": "10.9.113",
"lessThan": "10.9.113",
"versionType": "semver",
"status": "affected"
},
{
"version": "10.10.189",
"lessThan": "10.10.189",
"versionType": "semver",
"status": "affected"
},
{
"version": "10.11.127",
"lessThan": "10.11.127",
"versionType": "semver",
"status": "affected"
}
]
}
]
}
],
"metrics": {
"cvssMetricV31": [
{
"source": "3938794e-25f5-4123-a1ba-5cbd7f104512",
"type": "Secondary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N",
"baseScore": 7.4,
"baseSeverity": "HIGH",
"attackVector": "NETWORK",
"attackComplexity": "HIGH",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"availabilityImpact": "NONE"
},
"exploitabilityScore": 2.2,
"impactScore": 5.2
}
]
},
"weaknesses": [
{
"source": "3938794e-25f5-4123-a1ba-5cbd7f104512",
"type": "Secondary",
"description": [
{
"lang": "en",
"value": "CWE-295"
}
]
}
],
"references": [
{
"url": "https://security.tanium.com/TAN-2026-092",
"source": "3938794e-25f5-4123-a1ba-5cbd7f104512"
}
]
}