Tanium Server
Monthly
Authenticated information disclosure in Tanium Server across three supported release branches (7.7.3, 7.8.2, and 7.8.4) allows a low-privilege network user to access data they are not authorized to view, as described in vendor advisory TAN-2026-033. The CVSS 4.3 vector (AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N) confirms the flaw is network-reachable, low-complexity, and requires only standard credentials with no user interaction. Vendor-released patches are available for all affected branches; no public exploit code or CISA KEV listing exists at time of analysis.
Improper access control (CWE-863) in Tanium Server allows authenticated low-privilege users to impact platform availability without the required authorization. Affecting three active version branches (7.7.3, 7.8.2, and 7.8.4), the flaw was self-reported and patched by Tanium under advisory TAN-2026-031. No public exploit code or active exploitation has been identified at time of analysis.
UI Misrepresentation of Critical Information in Tanium Server enables a highly privileged network-accessible attacker to alter how critical data is presented within the administrative interface, potentially causing other operators to make incorrect security decisions based on falsified or obscured information. Classified under CWE-451, the flaw carries a CVSS score of 2.7 (Low), reflecting the high privilege barrier required for exploitation. No public exploit identified at time of analysis, and no CISA KEV listing has been associated with this vulnerability.
Tanium Server allows high-privileged authenticated users to disclose sensitive information through an unspecified network-accessible mechanism. The vulnerability requires administrative or equivalent privileges and carries a low CVSS score (2.7) reflecting limited impact to confidentiality with no integrity or availability consequences. No active exploitation or public proof-of-concept has been identified.
Authenticated information disclosure in Tanium Server across three supported release branches (7.7.3, 7.8.2, and 7.8.4) allows a low-privilege network user to access data they are not authorized to view, as described in vendor advisory TAN-2026-033. The CVSS 4.3 vector (AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N) confirms the flaw is network-reachable, low-complexity, and requires only standard credentials with no user interaction. Vendor-released patches are available for all affected branches; no public exploit code or CISA KEV listing exists at time of analysis.
Improper access control (CWE-863) in Tanium Server allows authenticated low-privilege users to impact platform availability without the required authorization. Affecting three active version branches (7.7.3, 7.8.2, and 7.8.4), the flaw was self-reported and patched by Tanium under advisory TAN-2026-031. No public exploit code or active exploitation has been identified at time of analysis.
UI Misrepresentation of Critical Information in Tanium Server enables a highly privileged network-accessible attacker to alter how critical data is presented within the administrative interface, potentially causing other operators to make incorrect security decisions based on falsified or obscured information. Classified under CWE-451, the flaw carries a CVSS score of 2.7 (Low), reflecting the high privilege barrier required for exploitation. No public exploit identified at time of analysis, and no CISA KEV listing has been associated with this vulnerability.
Tanium Server allows high-privileged authenticated users to disclose sensitive information through an unspecified network-accessible mechanism. The vulnerability requires administrative or equivalent privileges and carries a low CVSS score (2.7) reflecting limited impact to confidentiality with no integrity or availability consequences. No active exploitation or public proof-of-concept has been identified.