CVE-2026-121565highCWE-295

CVE-2026-121565: high-severity vulnerability in Tanium Asset

Tanium addressed an improper certificate validation vulnerability in multiple products

Published · Updated

Follow this CVE+ Monitor Comply+ Monitor Threat Response

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

21Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 7.4epss 0.2%
Tanium addressed an improper certificate validation vulnerability in multiple products. Products have been updated to distrust several intermediate CA certificates associated with compromised private keys.
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N
Affected products
Tanium · AssetTanium · ComplyTanium · ConnectTanium · Endpoint Configuration Toolset SolutionTanium · Health CheckTanium · Integrity MonitorTanium · PatchTanium · PerformanceTanium · Provision HostTanium · ReputationTanium · RevealTanium · TanOSTanium · Threat Response
Related CVEs — Tanium Asset

In the same product, most dangerous first.

CVE-2026-87021HIGHTanium addressed an unauthorized code execution vulnerability in Comply.EPSS 0.7%CVE-2026-87023HIGHTanium addressed a path traversal vulnerability in Comply.EPSS 0.5%CVE-2026-87024HIGHTanium addressed a SQL injection vulnerability in Asset.EPSS 0.4%CVE-2026-86865HIGHTanium addressed a SQL injection vulnerability in Asset.EPSS 0.4%CVE-2026-87030HIGHTanium addressed a path traversal vulnerability in Comply.EPSS 0.4%CVE-2026-9208HIGHTanium addressed an unauthorized code execution vulnerability in Connect.EPSS 0.4%