CVE-2026-121565highCWE-295

CVE-2026-121565: falha de alta gravidade em Tanium Asset

Tanium addressed an improper certificate validation vulnerability in multiple products

Publicada em 03 nov 2026 · Atualizada em 06 nov 2026

Seguir esta CVE + Monitorar Comply + Monitorar Threat Response

Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.

21Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackcvss 7.4epss 0.2%

Tanium addressed an improper certificate validation vulnerability in multiple products. Products have been updated to distrust several intermediate CA certificates associated with compromised private keys.

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N

Produtos afetados

Tanium · Asset Tanium · Comply Tanium · Connect Tanium · Endpoint Configuration Toolset Solution Tanium · Health Check Tanium · Integrity Monitor Tanium · Patch Tanium · Performance Tanium · Provision Host Tanium · Reputation Tanium · Reveal Tanium · TanOS Tanium · Threat Response

CVEs relacionadas — Tanium Asset

No mesmo produto, das mais perigosas para as menos.

CVE-2026-87021HIGHTanium addressed an unauthorized code execution vulnerability in Comply.EPSS 0.7%CVE-2026-87023HIGHTanium addressed a path traversal vulnerability in Comply.EPSS 0.5%CVE-2026-87024HIGHTanium addressed a SQL injection vulnerability in Asset.EPSS 0.4%CVE-2026-86865HIGHTanium addressed a SQL injection vulnerability in Asset.EPSS 0.4%CVE-2026-87030HIGHTanium addressed a path traversal vulnerability in Comply.EPSS 0.4%CVE-2026-9208HIGHTanium addressed an unauthorized code execution vulnerability in Connect.EPSS 0.4%

Referências

https://security.tanium.com/TAN-2026-092