Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

Tanium — Vulnerabilities & Security Advisories 86

Browse all 86 CVE security advisories affecting Tanium. AI-powered Chinese analysis, POCs, and references for each vulnerability.

Tanium operates as an endpoint management platform, enabling organizations to monitor, secure, and remediate devices across hybrid environments. Its architecture relies on a centralized server and distributed agents to execute queries and commands at scale. Historically, the software has been associated with forty-nine recorded Common Vulnerabilities and Exposures, predominantly involving remote code execution and privilege escalation flaws. These vulnerabilities often stem from improper input validation or insufficient access controls within the management console or agent communications. While no catastrophic breaches directly attributed to Tanium have been widely publicized, the high volume of CVEs highlights significant attack surface risks in its enterprise deployment. Security teams must prioritize patching these known issues, particularly those allowing unauthorized command execution, to maintain the integrity of their managed endpoints and prevent potential lateral movement within internal networks.

CVE ID Title CVSS Severity Published
CVE-2026-11391 Tanium addressed a SQL injection vulnerability in Patch. — Patch CWE-89 6.3 Medium 2026-07-28
CVE-2026-12139 Tanium addressed an information disclosure vulnerability in Connect. — Connect CWE-214 4.4 Medium 2026-07-21
CVE-2026-11925 Tanium addressed a User Interface (UI) Misrepresentation of Critical Information vulnerability in Tanium Server. — Tanium Server CWE-451 2.7 Low 2026-07-21
CVE-2026-15053 Tanium addressed a denial of service vulnerability in Tanium Server. — Tanium Server CWE-789 7.5 High 2026-07-08
CVE-2026-9208 Tanium addressed an unauthorized code execution vulnerability in Connect. — Connect CWE-78 8.8 High 2026-05-27
CVE-2026-9207 Tanium addressed an unauthorized code execution vulnerability in Connect. — Connect CWE-78 8.8 High 2026-05-27
CVE-2026-9156 Tanium addressed a denial of service vulnerability in Tanium Server. — Tanium Server CWE-772 6.5 Medium 2026-05-27
CVE-2026-6408 Tanium addressed an information disclosure vulnerability in Tanium Server. — Tanium Server CWE-522 2.7 Low 2026-04-22
CVE-2026-6392 Tanium addressed an information disclosure vulnerability in Threat Response. — Threat Response CWE-200 2.7 Low 2026-04-22
CVE-2026-6416 Tanium addressed an uncontrolled resource consumption vulnerability in Interact. — Interact CWE-400 2.7 Low 2026-04-22
CVE-2026-2350 Tanium addressed an insertion of sensitive information into log file vulnerability in Interact and TDS. — Interact CWE-532 6.5 Medium 2026-02-19
CVE-2026-1292 Tanium addressed an insertion of sensitive information into log file vulnerability in Trends. — Trends CWE-532 6.5 Medium 2026-02-19
CVE-2026-2605 Tanium addressed an insertion of sensitive information into log file vulnerability in TanOS. — TanOS CWE-532 5.3 Medium 2026-02-19
CVE-2026-2408 Use-after-free in Cloud Workloads — Cloud Workloads CWE-416 4.7 Medium 2026-02-19
CVE-2026-2435 ASSET-7706 — Asset CWE-89 6.3 Medium 2026-02-19
CVE-2026-1344 Insecure file permissions in Enforce Recovery Key Portal — Enforce Recovery Key Portal CWE-732 6.5 Medium 2026-02-17
CVE-2025-15314 Tanium addressed an arbitrary file deletion vulnerability in end-user-cx. — end-user-cx CWE-59 5.5 Medium 2026-02-09
CVE-2025-15313 Tanium addressed an arbitrary file deletion vulnerability in Tanium EUSS. — Tanium EUSS CWE-59 5.5 Medium 2026-02-09
CVE-2025-15310 Tanium addressed a local privilege escalation vulnerability in Patch Endpoint Tools. — Patch Endpoint Tools CWE-59 7.8 High 2026-02-09
CVE-2025-15318 Tanium addressed an arbitrary file deletion vulnerability in End-User Notifications Endpoint Tools. — End-User Notifications Endpoint Tools CWE-59 5.1 Medium 2026-02-09
CVE-2025-15319 Tanium addressed a local privilege escalation vulnerability in Patch Endpoint Tools. — Patch Endpoint Tools CWE-59 7.8 High 2026-02-09
CVE-2025-15315 Tanium addressed a local privilege escalation vulnerability in Tanium Module Server. — Tanium Module Server CWE-88 6.7 Medium 2026-02-09
CVE-2025-15316 Tanium addressed a local privilege escalation vulnerability in Tanium Server. — Tanium Server CWE-88 6.7 Medium 2026-02-09
CVE-2025-15317 Tanium addressed an uncontrolled resource consumption vulnerability in Tanium Server. — Tanium Server CWE-770 6.5 Medium 2026-02-09
CVE-2025-15320 Tanium addressed a denial of service vulnerability in Tanium Client. — Tanium Client CWE-605 3.3 Low 2026-02-06
CVE-2025-15311 Tanium addressed an unauthorized code execution vulnerability in Tanium Appliance. — Tanium Appliance CWE-150 7.8 High 2026-02-05
CVE-2025-15312 Tanium addressed an improper output sanitization vulnerability in TanOS. — Tanium Appliance CWE-116 6.6 Medium 2026-02-05
CVE-2025-15324 Tanium addressed a local privilege escalation vulnerability in Engage. — Engage CWE-59 6.6 Medium 2026-02-05
CVE-2025-15325 Tanium addressed an improper input validation vulnerability in Discover. — Discover CWE-89 6.3 Medium 2026-02-05
CVE-2025-15327 Tanium addressed an improper access controls vulnerability in Deploy. — Deploy CWE-862 4.3 Medium 2026-02-05

This page lists every published CVE security advisory associated with Tanium. Each entry links to a detailed page with CVSS scoring, CWE classification, affected products and references. AI-generated Chinese analysis is provided for fast triage.