Vulnerabilidades em Tanium

136 resultados
Análise Vexday

Com 52 CVEs catalogadas e nenhuma em exploração ativa no catálogo KEV da CISA, o Tanium apresenta taxa de exploração abaixo da média geral do catálogo, o que sugere um perfil de risco operacional relativamente contido no momento. A ausência de vulnerabilidades críticas e de provas de conceito públicas reforça esse cenário, embora 6 CVEs tenham surgido nos últimos 90 dias, indicando atividade recente de descoberta que merece acompanhamento. O tipo de falha mais recorrente é CWE-276 (permissões padrão incorretas), uma classe de fraqueza que tende a ser explorada em cadeias de ataque quando combinada com outros vetores. A CVE mais relevante no momento, CVE-2026-9208, apresenta EPSS de 0,0042, valor baixo que não sinaliza probabilidade elevada de exploração iminente, mas que deve ser monitorado à medida que novos detalhes técnicos eventualmente se tornem públicos.

CVE-2025-15325MEDIUMTanium addressed an improper input validation vulnerability in Discover.EPSS 0.3%CVE-2025-15321LOWTanium addressed an improper input validation vulnerability in Tanium Appliance.EPSS 0.3%CVE-2026-2435MEDIUMASSET-7706EPSS 0.3%CVE-2026-116654MEDIUMTanium addressed an improper input validation vulnerability in Threat Response.EPSS 0.3%CVE-2026-116668MEDIUMTanium addressed an uncontrolled resource consumption vulnerability in Discover.EPSS 0.3%CVE-2025-15322MEDIUMTanium addressed an improper access controls vulnerability in Tanium Server.EPSS 0.3%CVE-2025-15327MEDIUMTanium addressed an improper access controls vulnerability in Deploy.EPSS 0.3%CVE-2025-15326MEDIUMTanium addressed an improper access controls vulnerability in Patch.EPSS 0.3%CVE-2026-116646MEDIUMTanium addressed an uncontrolled resource consumption vulnerability in Threat Response.EPSS 0.3%CVE-2026-108327MEDIUMTanium addressed a path traversal vulnerability in Tanium Data Service.EPSS 0.3%CVE-2026-87047MEDIUMTanium addressed an improper access controls vulnerability in Comply.EPSS 0.3%CVE-2026-87113MEDIUMTanium addressed an improper access controls vulnerability in Threat Response.EPSS 0.3%CVE-2025-15335MEDIUMTanium addressed an information disclosure vulnerability in Threat Response.EPSS 0.3%CVE-2025-15334MEDIUMTanium addressed an information disclosure vulnerability in Threat Response.EPSS 0.3%CVE-2026-6416LOWTanium addressed an uncontrolled resource consumption vulnerability in Interact.EPSS 0.3%CVE-2026-87019MEDIUMTanium addressed an improper access controls vulnerability in Comply.EPSS 0.3%CVE-2026-11391MEDIUMTanium addressed a SQL injection vulnerability in Patch.EPSS 0.3%CVE-2026-87026LOWTanium addressed an improper access controls vulnerability in Threat Response.EPSS 0.3%CVE-2026-87046MEDIUMTanium addressed an improper access controls vulnerability in Comply.EPSS 0.3%CVE-2026-108303HIGHTanium addressed an unauthorized code execution vulnerability in Certificate Manager.EPSS 0.3%