# Tanium vulnerabilities Source: https://junglewise.ai/threats/vendors/tanium Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats Updated: 11 November 2026, 03:07 UTC. Rebuilt every hour. Data: https://junglewise.ai/threats/vendors/tanium.json License: CC BY 4.0 with a link back Junglewise Threat Intelligence has tracked 77 vulnerabilities in Tanium: 0 in the last 7 days and 71 in the last 90 days, 0 of them critical and 0 exploited in the wild. The most recent, CVE-2026-121565, was published on 3 November 2026. 45 vulnerabilities in the last four weeks, up 543% on the four before (7). 8 technologies have a page of their own. ## Counts - Last 7 days: 0 - Last 30 days: 45 - Last 90 days: 71 - All time: 77 (0 critical, 0 exploited in the wild) ## About Tanium Tanium is a cybersecurity and systems management company that provides endpoint management and security solutions. ## Latest Tanium vulnerabilities - [CVE-2026-121565: Tanium multiple products improper certificate validation](https://junglewise.ai/threats/cve-2026-121565-tanium-addressed-an-improper-certificate-validation) (high, CVSS 7.4, published 3 Nov 2026) - [CVE-2026-120775: Tanium Deploy heap-based buffer overflow](https://junglewise.ai/threats/cve-2026-120775-tanium-addressed-a-heap-based-buffer-overflow-vulnerability-in) (high, CVSS 7.2, published 3 Nov 2026) - [CVE-2026-116669: Tanium Discover improper access controls](https://junglewise.ai/threats/cve-2026-116669-tanium-addressed-an-improper-access-controls-vulnerability-in) (medium, CVSS 6.5, published 3 Nov 2026) - [CVE-2026-116668: Tanium Discover uncontrolled resource consumption](https://junglewise.ai/threats/cve-2026-116668-tanium-addressed-an-uncontrolled-resource-consumption) (medium, CVSS 4.3, published 3 Nov 2026) - [CVE-2026-116667: Tanium Discover improper access control](https://junglewise.ai/threats/cve-2026-116667-tanium-addressed-an-improper-access-controls-vulnerability-in) (medium, CVSS 4.2, published 3 Nov 2026) - [CVE-2026-116666: Tanium Discover information disclosure](https://junglewise.ai/threats/cve-2026-116666-tanium-addressed-an-information-disclosure-vulnerability-in) (medium, CVSS 4.3, published 3 Nov 2026) - [CVE-2026-116665: Tanium Discover information disclosure via asset permission bypass](https://junglewise.ai/threats/cve-2026-116665-tanium-addressed-an-information-disclosure-vulnerability-in) (medium, CVSS 4.3, published 3 Nov 2026) - [CVE-2026-116663: Tanium Enforce improper access control vulnerability](https://junglewise.ai/threats/cve-2026-116663-tanium-addressed-an-improper-access-controls-vulnerability-in) (medium, CVSS 6.5, published 3 Nov 2026) - [CVE-2026-116661: Tanium Enforce improper access controls](https://junglewise.ai/threats/cve-2026-116661-tanium-addressed-an-improper-access-controls-vulnerability-in) (medium, CVSS 6.5, published 3 Nov 2026) - [CVE-2026-116654: Tanium Threat Response input validation bypass in Live Response](https://junglewise.ai/threats/cve-2026-116654-tanium-addressed-an-improper-input-validation-vulnerability-in) (medium, CVSS 6.5, published 3 Nov 2026) - [CVE-2026-116653: Tanium Threat Response improper input validation](https://junglewise.ai/threats/cve-2026-116653-tanium-addressed-an-improper-input-validation-vulnerability-in) (medium, CVSS 4.3, published 3 Nov 2026) - [CVE-2026-116652: Tanium Threat Response business logic error](https://junglewise.ai/threats/cve-2026-116652-tanium-addressed-a-business-logic-error-in-threat-response) (medium, CVSS 4.3, published 3 Nov 2026) - [CVE-2026-116651: Tanium Threat Response unauthorized code execution in SSH Known Hosts sensor](https://junglewise.ai/threats/cve-2026-116651-tanium-addressed-an-unauthorized-code-execution-vulnerability-in) (high, CVSS 7.5, published 3 Nov 2026) - [CVE-2026-116650: Tanium Threat Response unauthorized code execution](https://junglewise.ai/threats/cve-2026-116650-tanium-addressed-an-unauthorized-code-execution-vulnerability-in) (high, CVSS 7.5, published 3 Nov 2026) - [CVE-2026-116648: Tanium Discover formula injection in CSV export](https://junglewise.ai/threats/cve-2026-116648-tanium-addressed-an-improper-output-sanitization-vulnerability) (medium, CVSS 4.1, published 3 Nov 2026) - [CVE-2026-116646: Tanium Threat Response uncontrolled resource consumption](https://junglewise.ai/threats/cve-2026-116646-tanium-addressed-an-uncontrolled-resource-consumption) (medium, CVSS 4.3, published 3 Nov 2026) - [CVE-2026-108327: Tanium Data Service path traversal](https://junglewise.ai/threats/cve-2026-108327-tanium-addressed-a-path-traversal-vulnerability-in-tanium-data) (medium, CVSS 5, published 3 Nov 2026) - [CVE-2026-108324: Tanium Client denial of service](https://junglewise.ai/threats/cve-2026-108324-tanium-addressed-a-denial-of-service-vulnerability-in-tanium) (medium, CVSS 6.5, published 3 Nov 2026) - [CVE-2026-87086: Tanium Provision denial of service](https://junglewise.ai/threats/cve-2026-87086-tanium-addressed-a-denial-of-service-vulnerability-in-provision) (high, CVSS 7.5, published 27 Oct 2026) - [CVE-2026-87085: Tanium Provision SQL injection](https://junglewise.ai/threats/cve-2026-87085-tanium-addressed-a-sql-injection-vulnerability-in-provision) (medium, CVSS 6.3, published 27 Oct 2026) - [CVE-2026-116662: Tanium Enforce compression bomb denial of service](https://junglewise.ai/threats/cve-2026-116662-tanium-addressed-a-compression-bomb-vulnerability-in-enforce) (high, CVSS 7.5, published 27 Oct 2026) - [CVE-2026-116660: Tanium Enforce improper access controls](https://junglewise.ai/threats/cve-2026-116660-tanium-addressed-an-improper-access-controls-vulnerability-in) (medium, CVSS 4.3, published 27 Oct 2026) - [CVE-2026-116659: Tanium Enforce denial of service via resource consumption](https://junglewise.ai/threats/cve-2026-116659-tanium-addressed-an-uncontrolled-resource-consumption) (medium, CVSS 4.3, published 27 Oct 2026) - [CVE-2026-116658: Tanium Enforce denial of service](https://junglewise.ai/threats/cve-2026-116658-tanium-addressed-a-denial-of-service-vulnerability-in-enforce) (medium, CVSS 6.5, published 27 Oct 2026) - [CVE-2026-116657: Tanium Enforce denial of service](https://junglewise.ai/threats/cve-2026-116657-tanium-addressed-a-denial-of-service-vulnerability-in-enforce) (medium, CVSS 5.3, published 27 Oct 2026) ## Most severe Tanium vulnerabilities - [CVE-2026-87105: Tanium Threat Response SQL injection](https://junglewise.ai/threats/cve-2026-87105-tanium-threat-response-sql-injection) (high, CVSS 8.8, published 16 Sep 2026) - [CVE-2026-108329: Tanium Threat Response unauthorized code execution](https://junglewise.ai/threats/cve-2026-108329-tanium-addressed-an-unauthorized-code-execution-vulnerability-in) (high, CVSS 8.8, published 27 Oct 2026) - [CVE-2026-108303: Tanium Certificate Manager code execution vulnerability](https://junglewise.ai/threats/cve-2026-108303-tanium-addressed-an-unauthorized-code-execution-vulnerability-in) (high, CVSS 8.8, published 27 Oct 2026) - [CVE-2026-87023: Tanium Comply path traversal vulnerability](https://junglewise.ai/threats/cve-2026-87023-tanium-comply-path-traversal-vulnerability) (high, CVSS 8.5, published 9 Sep 2026) - [CVE-2026-87030: Tanium Comply path traversal arbitrary file deletion](https://junglewise.ai/threats/cve-2026-87030-tanium-comply-path-traversal-arbitrary-file-deletion) (high, CVSS 8.5, published 9 Sep 2026) - [CVE-2026-87034: Tanium Comply SQL injection vulnerability](https://junglewise.ai/threats/cve-2026-87034-tanium-comply-sql-injection-vulnerability) (high, CVSS 8.3, published 9 Sep 2026) - [CVE-2026-87075: Tanium Comply improper access control in vulnerability sources](https://junglewise.ai/threats/cve-2026-87075-tanium-comply-improper-access-control-in-vulnerability-sources) (high, CVSS 8.1, published 9 Sep 2026) - [CVE-2026-87036: Tanium Comply improper access controls in assessment deletion](https://junglewise.ai/threats/cve-2026-87036-tanium-comply-improper-access-controls-in-assessment-deletion) (high, CVSS 8.1, published 9 Sep 2026) - [CVE-2026-108307: Tanium Index heap buffer overflow](https://junglewise.ai/threats/cve-2026-108307-tanium-addressed-a-heap-based-buffer-overflow-vulnerability-in) (high, CVSS 7.8, published 27 Oct 2026) - [CVE-2026-108306: Tanium End-User Notifications local privilege escalation](https://junglewise.ai/threats/cve-2026-108306-tanium-addressed-a-local-privilege-escalation-vulnerability-in) (high, CVSS 7.8, published 27 Oct 2026) ## Vulnerabilities per week 45 vulnerabilities in the last four weeks, up 543% on the four before (7). | Week of | Vulns | Critical | Exploited | | --- | --- | --- | --- | | 17 Aug 2026 | 0 | 0 | 0 | | 24 Aug 2026 | 0 | 0 | 0 | | 31 Aug 2026 | 0 | 0 | 0 | | 7 Sep 2026 | 19 | 0 | 0 | | 14 Sep 2026 | 7 | 0 | 0 | | 21 Sep 2026 | 0 | 0 | 0 | | 28 Sep 2026 | 0 | 0 | 0 | | 5 Oct 2026 | 0 | 0 | 0 | | 12 Oct 2026 | 0 | 0 | 0 | | 19 Oct 2026 | 0 | 0 | 0 | | 26 Oct 2026 | 27 | 0 | 0 | | 2 Nov 2026 | 18 | 0 | 0 | | 9 Nov 2026 | 0 | 0 | 0 | ## Tanium technologies - [Tanium Comply](https://junglewise.ai/threats/technologies/comply): 20 vulnerabilities - [Tanium Threat Response](https://junglewise.ai/threats/technologies/threat-response): 14 vulnerabilities - [Tanium Enforce](https://junglewise.ai/threats/technologies/enforce): 12 vulnerabilities - [Tanium Endpoint Configuration Toolset Solution](https://junglewise.ai/threats/technologies/endpoint-configuration-toolset-solution): 8 vulnerabilities - [Tanium Discover](https://junglewise.ai/threats/technologies/discover): 7 vulnerabilities - [Tanium Server](https://junglewise.ai/threats/technologies/tanium-server): 6 vulnerabilities - [Tanium Asset](https://junglewise.ai/threats/technologies/asset): 3 vulnerabilities - [Tanium Provision](https://junglewise.ai/threats/technologies/provision): 3 vulnerabilities ## Sources NVD, GitHub Security Advisories, OSV, the CISA Known Exploited Vulnerabilities catalog, FIRST EPSS and vendor advisories. Rebuilt every hour. Cite as: Junglewise Threat Intelligence, "Tanium vulnerabilities", https://junglewise.ai/threats/vendors/tanium, 11 November 2026.