Vendor
Tanium vulnerabilities
Updated . Rebuilt every hour.
Junglewise Threat Intelligence has tracked 77 vulnerabilities in Tanium: 0 in the last 7 days and 71 in the last 90 days, 0 of them critical and 0 exploited in the wild. The most recent, CVE-2026-121565, was published on 3 November 2026. 45 vulnerabilities in the last four weeks, up 543% on the four before (7). 8 technologies have a page of their own.
- Last 7 days
- 0
- Last 90 days
- 71
- Critical, all time
- 0
- Exploited in the wild
- 0
About Tanium
Tanium is a cybersecurity and systems management company that provides endpoint management and security solutions.
Tanium technologies
Latest Tanium vulnerabilities
- CVE-2026-121565: Tanium multiple products improper certificate validationhighCVSS 7.4
- CVE-2026-120775: Tanium Deploy heap-based buffer overflowhighCVSS 7.2
- CVE-2026-116669: Tanium Discover improper access controlsmediumCVSS 6.5
- CVE-2026-116668: Tanium Discover uncontrolled resource consumptionmediumCVSS 4.3
- CVE-2026-116667: Tanium Discover improper access controlmediumCVSS 4.2
- CVE-2026-116666: Tanium Discover information disclosuremediumCVSS 4.3
- CVE-2026-116665: Tanium Discover information disclosure via asset permission bypassmediumCVSS 4.3
- CVE-2026-116663: Tanium Enforce improper access control vulnerabilitymediumCVSS 6.5
- CVE-2026-116661: Tanium Enforce improper access controlsmediumCVSS 6.5
- CVE-2026-116654: Tanium Threat Response input validation bypass in Live ResponsemediumCVSS 6.5
- CVE-2026-116653: Tanium Threat Response improper input validationmediumCVSS 4.3
- CVE-2026-116652: Tanium Threat Response business logic errormediumCVSS 4.3
- CVE-2026-116651: Tanium Threat Response unauthorized code execution in SSH Known Hosts sensorhighCVSS 7.5
- CVE-2026-116650: Tanium Threat Response unauthorized code executionhighCVSS 7.5
- CVE-2026-116648: Tanium Discover formula injection in CSV exportmediumCVSS 4.1
- CVE-2026-116646: Tanium Threat Response uncontrolled resource consumptionmediumCVSS 4.3
- CVE-2026-108327: Tanium Data Service path traversalmediumCVSS 5
- CVE-2026-108324: Tanium Client denial of servicemediumCVSS 6.5
- CVE-2026-87086: Tanium Provision denial of servicehighCVSS 7.5
- CVE-2026-87085: Tanium Provision SQL injectionmediumCVSS 6.3
- CVE-2026-116662: Tanium Enforce compression bomb denial of servicehighCVSS 7.5
- CVE-2026-116660: Tanium Enforce improper access controlsmediumCVSS 4.3
- CVE-2026-116659: Tanium Enforce denial of service via resource consumptionmediumCVSS 4.3
- CVE-2026-116658: Tanium Enforce denial of servicemediumCVSS 6.5
- CVE-2026-116657: Tanium Enforce denial of servicemediumCVSS 5.3
Most severe Tanium vulnerabilities
Exploited in the wild first, then by severity and CVSS score.
- CVE-2026-87105: Tanium Threat Response SQL injectionhighCVSS 8.8EPSS 0.4%
- CVE-2026-108329: Tanium Threat Response unauthorized code executionhighCVSS 8.8
- CVE-2026-108303: Tanium Certificate Manager code execution vulnerabilityhighCVSS 8.8
- CVE-2026-87023: Tanium Comply path traversal vulnerabilityhighCVSS 8.5EPSS 0.5%
- CVE-2026-87030: Tanium Comply path traversal arbitrary file deletionhighCVSS 8.5EPSS 0.4%
- CVE-2026-87034: Tanium Comply SQL injection vulnerabilityhighCVSS 8.3EPSS 0.3%
- CVE-2026-87075: Tanium Comply improper access control in vulnerability sourceshighCVSS 8.1EPSS 0.4%
- CVE-2026-87036: Tanium Comply improper access controls in assessment deletionhighCVSS 8.1EPSS 0.4%
- CVE-2026-108307: Tanium Index heap buffer overflowhighCVSS 7.8
- CVE-2026-108306: Tanium End-User Notifications local privilege escalationhighCVSS 7.8
Vulnerabilities per week
45 vulnerabilities in the last four weeks, up 543% on the four before (7). The last 13 weeks, by the week each vulnerability was published.
| Week of | Bar | Vulns | Critical |
|---|---|---|---|
| 17 Aug 2026 | 0 | 0 | |
| 24 Aug 2026 | 0 | 0 | |
| 31 Aug 2026 | 0 | 0 | |
| 7 Sep 2026 | 19 | 0 | |
| 14 Sep 2026 | 7 | 0 | |
| 21 Sep 2026 | 0 | 0 | |
| 28 Sep 2026 | 0 | 0 | |
| 5 Oct 2026 | 0 | 0 | |
| 12 Oct 2026 | 0 | 0 | |
| 19 Oct 2026 | 0 | 0 | |
| 26 Oct 2026 | 27 | 0 | |
| 2 Nov 2026 | 18 | 0 | |
| 9 Nov 2026 | 0 | 0 |
Embed a badge
A live badge for a README, a status page or an internal wiki: how many Tanium vulnerabilities were published in the last 7 days and how many of them are critical, refreshed hourly.
[](https://junglewise.ai/threats/vendors/tanium)<a href="https://junglewise.ai/threats/vendors/tanium"><img src="https://junglewise.ai/threats/vendors/tanium/badge.svg" alt="Tanium vulnerabilities" /></a>How this is built
Junglewise Threat Intelligence collects vulnerabilities from NVD, GitHub Security Advisories, OSV, the CISA Known Exploited Vulnerabilities catalog, FIRST EPSS and vendor advisories, and matches each one to the technologies and vendors it affects. Dates are the date a vulnerability was published, in UTC.
The pages are rebuilt from the database every hour. Frozen weekly and monthly reports never change once published, so they can be cited.
Use this data
The same data is at https://junglewise.ai/threats/vendors/tanium.json, and this page as text at https://junglewise.ai/threats/vendors/tanium.md, for scripts and language models. It is free to reuse under CC BY 4.0 with a link back to this page.
Cite as: Junglewise Threat Intelligence, "Tanium vulnerabilities", https://junglewise.ai/threats/vendors/tanium, 11 November 2026.