Cx Stream
Monthly
Tanium Stream Client Extension (cx-stream) and Endpoint Configuration Toolset Solution do not properly validate certificates on the connections they initiate, so an attacker who can intercept or relay TLS traffic can impersonate the peer and disclose information (CVSS 6.5; C:H/I:N/A:L). The issue is unauthenticated (PR:N) and requires no user interaction (UI:N), but exploitation depends on a man-in-the-middle network position, which is reflected by AC:H; no public exploit has been identified at time of analysis. This is a moderate-severity, this_month-priority issue rather than an emergency, and vendor fixes are available per Tanium advisory TAN-2026-060.
Tanium Stream Client Extension (cx-stream) and Endpoint Configuration Toolset Solution do not properly validate certificates on the connections they initiate, so an attacker who can intercept or relay TLS traffic can impersonate the peer and disclose information (CVSS 6.5; C:H/I:N/A:L). The issue is unauthenticated (PR:N) and requires no user interaction (UI:N), but exploitation depends on a man-in-the-middle network position, which is reflected by AC:H; no public exploit has been identified at time of analysis. This is a moderate-severity, this_month-priority issue rather than an emergency, and vendor fixes are available per Tanium advisory TAN-2026-060.