Is CVE-2026-120775 exploited in the wild?

No. Junglewise Threat Intelligence has no report of CVE-2026-120775 being exploited in the wild.

How severe is CVE-2026-120775?

High severity, with a CVSS score of 7.2, published 3 November 2026.

Which products and versions are affected?

Tanium Deploy 2.36.0 to 2.36.294 (2025H1), 2.40.0 to 2.40.235 (2025H2), 2.45.0 to 2.45.322 (2026H1).

Is there a fix for CVE-2026-120775?

Yes: fixed in Deploy 2.36.294 (2025H1 Update 27), 2.40.235 (2025H2 Update 17), 2.45.322 (2026H1 Update 10) and later. Junglewise finds every place you run it, drafts the upgrade and applies it once you approve.

How is CVE-2026-120775 attacked?

It is attacked over the network, in a hosted service.

Am I affected by CVE-2026-120775?

Check whether you run Tanium Deploy at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

CVE-2026-120775: Tanium Deploy heap-based buffer overflow

CVE-2026-120775 · Severity: high · CVSS 7.2 · Published 2026-11-03

Tanium Deploy is a software deployment tool used to manage and distribute packages across enterprise networks. A heap buffer overflow vulnerability in Deploy could allow an authenticated user with package write permissions to execute unauthorized code, potentially compromising the integrity of software deployments and systems across an organization.

Vendors: Tanium.

Quick answers

Is CVE-2026-120775 exploited in the wild?: No. Junglewise Threat Intelligence has no report of CVE-2026-120775 being exploited in the wild.
How severe is CVE-2026-120775?: High severity, with a CVSS score of 7.2, published 3 November 2026.
Which products and versions are affected?: Tanium Deploy 2.36.0 to 2.36.294 (2025H1), 2.40.0 to 2.40.235 (2025H2), 2.45.0 to 2.45.322 (2026H1).
Is there a fix for CVE-2026-120775?: Yes: fixed in Deploy 2.36.294 (2025H1 Update 27), 2.40.235 (2025H2 Update 17), 2.45.322 (2026H1 Update 10) and later. Junglewise finds every place you run it, drafts the upgrade and applies it once you approve.
How is CVE-2026-120775 attacked?: It is attacked over the network, in a hosted service.
Am I affected by CVE-2026-120775?: Check whether you run Tanium Deploy at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

How to fix

Fixed in: Deploy 2.36.294 (2025H1 Update 27), 2.40.235 (2025H2 Update 17), 2.45.322 (2026H1 Update 10) and later

Technical details

A heap-based buffer overflow in Tanium Deploy allows authenticated users with the Deploy Software Package write permission to trigger arbitrary code execution in the Deploy process context. The vulnerability requires network access and prior authentication but no user interaction. No patch information indicates this is a known issue under active mitigation.

Affected products

Tanium Deploy 2.36.0 to 2.36.294 (2025H1), 2.40.0 to 2.40.235 (2025H2), 2.45.0 to 2.45.322 (2026H1)

Timeline

2026-11-03: disclosed

References

https://security.tanium.com/TAN-2026-089

This page as Markdown. Free to reuse under CC BY 4.0 with a link back.