Discover

CVE-2026-87076 Sep 16, 19:41 MEDIUM PATCH This Month

Information disclosure in the Tanium Discover module allows an authenticated console user to read data they should not have access to, with the vendor confirming the flaw has been addressed. The vulnerability requires network reachability and a valid low-privilege Tanium session (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N, base 6.5) but no user interaction, and it affects only organizations that have licensed and deployed the optional Discover component. Impact is confined to confidentiality - there is no integrity or availability effect - and no public exploit code or confirmed active exploitation has been identified at time of analysis.

CVE-2025-15339 Feb 05, 19:15 MEDIUM This Month

Tanium addressed an incorrect default permissions vulnerability in Discover. [CVSS 6.5 MEDIUM]

CVE-2025-15325 Feb 05, 19:15 MEDIUM This Month

Tanium addressed an improper input validation vulnerability in Discover. [CVSS 6.3 MEDIUM]

CVE-2026-1224 Jan 26, 18:16 MEDIUM This Month

Tanium addressed an uncontrolled resource consumption vulnerability in Discover. [CVSS 4.9 MEDIUM]

CVE-2026-0925 Jan 26, 18:16 LOW Monitor

Tanium addressed an improper input validation vulnerability in Discover. [CVSS 2.7 LOW]

CVE-2021-28117 Mar 20, 21:15 HIGH PATCH This Week

libdiscover/backends/KNSBackend/KNSResource.cpp in KDE Discover before 5.21.3 automatically creates links to potentially dangerous URLs (that are neither https:// nor http://) based on the content of. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity.