Skip to main content

Discover CVE-2025-15339

MEDIUM
Incorrect Default Permissions (CWE-276)
2026-02-05 3938794e-25f5-4123-a1ba-5cbd7f104512
Privilege Escalation Discover
6.5
CVSS 3.1 · NVD
Share

Severity by source

NVD PRIMARY
6.5 MEDIUM
AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N
Attack Vector
Network
Attack Complexity
Low
Privileges Required
High
User Interaction
None
Scope
Unchanged
Confidentiality
High
Integrity
High
Availability
None

Lifecycle Timeline

2
Analysis Generated
Mar 12, 2026 - 21:55 vuln.today
CVE Published
Feb 05, 2026 - 19:15 nvd
MEDIUM 6.5

DescriptionCVE.org

Tanium addressed an incorrect default permissions vulnerability in Discover.

AnalysisAI

Tanium addressed an incorrect default permissions vulnerability in Discover. [CVSS 6.5 MEDIUM]

Technical ContextAI

Classified as CWE-276 (Incorrect Default Permissions). Affects Discover. Tanium addressed an incorrect default permissions vulnerability in Discover.

RemediationAI

Monitor vendor advisories for a patch. Restrict network access to the affected service where possible.

More in Discover

View all
CVE-2021-28117 HIGH
7.5 Mar 20

libdiscover/backends/KNSBackend/KNSResource.cpp in KDE Discover before 5.21.3 automatically creates links to potentially
CVE-2025-15325 MEDIUM
6.3 Feb 05

Tanium addressed an improper input validation vulnerability in Discover. [CVSS 6.3 MEDIUM]
CVE-2026-1224 MEDIUM
4.9 Jan 26

Tanium addressed an uncontrolled resource consumption vulnerability in Discover. [CVSS 4.9 MEDIUM]
CVE-2026-0925 LOW
2.7 Jan 26

Tanium addressed an improper input validation vulnerability in Discover. [CVSS 2.7 LOW]

Same weakness CWE-276 – Incorrect Default Permissions

View all
CVE-2013-0632 CRITICAL POC
9.8
CVE-2017-11610 HIGH POC
8.8
CVE-2022-22948 MEDIUM POC
6.5
CVE-2017-8625 HIGH POC
8.8
CVE-2016-5425 HIGH POC
7.8
CVE-2024-55215 CRITICAL POC
9.8
CVE-2024-57604 CRITICAL POC
9.8
CVE-2025-60262 CRITICAL POC
9.8

Same technique Privilege Escalation

View all
CVE-2025-47812 CRITICAL POC
10.0
CVE-2013-0422 CRITICAL POC
9.8
CVE-2013-0632 CRITICAL POC
9.8
CVE-2017-5689 CRITICAL POC
9.8
CVE-2017-12635 CRITICAL POC
9.8
CVE-2016-10372 CRITICAL POC
9.8
CVE-2014-9583 CRITICAL POC
10.0
CVE-2012-0297 CRITICAL POC
10.0

Share

CVE-2025-15339 vulnerability details – vuln.today
Back

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy