Security Advisory catalog CVE-2026-121565
cve-program · CVE-2026-121565 Published
Tanium addressed an improper certificate validation vulnerability in multiple products. Products have been updated to distrust several intermediate CA certificates associated with compromised private keys.
Read the publisher's advisory Affected versions, risk and source history
cve-program · CVE-2026-121565 Published TanOS Vendor product
Publisher's version information Shown as published. These rules are not interpreted as NuGet package version ranges.
{
"product": "TanOS",
"vendor": "Tanium",
"versions": [
{
"version": "1.8.5",
"status": "affected",
"lessThan": "1.8.5.0326",
"versionType": "custom"
},
{
"version": "1.8.6",
"status": "affected",
"lessThan": "1.8.6.0193",
"versionType": "custom"
},
{
"version": "1.9.0",
"status": "affected",
"lessThan": "1.9.0.0089",
"versionType": "custom"
}
]
} Asset Vendor product
Publisher's version information Shown as published. These rules are not interpreted as NuGet package version ranges.
{
"product": "Asset",
"vendor": "Tanium",
"versions": [
{
"version": "1.33",
"status": "affected",
"lessThan": "1.33.334",
"versionType": "custom"
},
{
"version": "1.36",
"status": "affected",
"lessThan": "1.36.182",
"versionType": "custom"
},
{
"version": "1.39",
"status": "affected",
"lessThan": "1.39.164",
"versionType": "custom"
}
]
} Comply Vendor product
Publisher's version information Shown as published. These rules are not interpreted as NuGet package version ranges.
{
"product": "Comply",
"vendor": "Tanium",
"versions": [
{
"version": "2.32",
"status": "affected",
"lessThan": "2.32.275",
"versionType": "custom"
},
{
"version": "2.35",
"status": "affected",
"lessThan": "2.35.337",
"versionType": "custom"
},
{
"version": "2.37",
"status": "affected",
"lessThan": "2.37.347",
"versionType": "custom"
}
]
} Connect Vendor product
Publisher's version information Shown as published. These rules are not interpreted as NuGet package version ranges.
{
"product": "Connect",
"vendor": "Tanium",
"versions": [
{
"version": "5.29",
"status": "affected",
"lessThan": "5.29.272",
"versionType": "custom"
},
{
"version": "5.37",
"status": "affected",
"lessThan": "5.37.177",
"versionType": "custom"
},
{
"version": "5.47",
"status": "affected",
"lessThan": "5.47.135",
"versionType": "custom"
}
]
} Integrity Monitor Vendor product
Publisher's version information Shown as published. These rules are not interpreted as NuGet package version ranges.
{
"product": "Integrity Monitor",
"vendor": "Tanium",
"versions": [
{
"version": "3.6",
"status": "affected",
"lessThan": "3.6.608",
"versionType": "custom"
},
{
"version": "3.7",
"status": "affected",
"lessThan": "3.7.383",
"versionType": "custom"
},
{
"version": "3.8",
"status": "affected",
"lessThan": "3.8.362",
"versionType": "custom"
}
]
} Health Check Vendor product
Publisher's version information Shown as published. These rules are not interpreted as NuGet package version ranges.
{
"product": "Health Check",
"vendor": "Tanium",
"versions": [
{
"version": "1.13",
"status": "affected",
"lessThan": "1.13.653",
"versionType": "custom"
}
]
} Endpoint Configuration Toolset Solution Vendor product
Publisher's version information Shown as published. These rules are not interpreted as NuGet package version ranges.
{
"product": "Endpoint Configuration Toolset Solution",
"vendor": "Tanium",
"versions": [
{
"version": "1.51",
"status": "affected",
"lessThan": "1.51.61",
"versionType": "custom"
},
{
"version": "1.59",
"status": "affected",
"lessThan": "1.59.51",
"versionType": "custom"
},
{
"version": "1.71",
"status": "affected",
"lessThan": "1.71.26",
"versionType": "custom"
}
]
} Patch Vendor product
Publisher's version information Shown as published. These rules are not interpreted as NuGet package version ranges.
{
"product": "Patch",
"vendor": "Tanium",
"versions": [
{
"version": "3.24",
"status": "affected",
"lessThan": "3.24.328",
"versionType": "custom"
},
{
"version": "3.28",
"status": "affected",
"lessThan": "3.28.346",
"versionType": "custom"
},
{
"version": "3.32",
"status": "affected",
"lessThan": "3.32.383",
"versionType": "custom"
}
]
} Performance Vendor product
Publisher's version information Shown as published. These rules are not interpreted as NuGet package version ranges.
{
"product": "Performance",
"vendor": "Tanium",
"versions": [
{
"version": "1.25",
"status": "affected",
"lessThan": "1.25.196",
"versionType": "custom"
}
]
} Reputation Vendor product
Publisher's version information Shown as published. These rules are not interpreted as NuGet package version ranges.
{
"product": "Reputation",
"vendor": "Tanium",
"versions": [
{
"version": "6.6",
"status": "affected",
"lessThan": "6.6.150",
"versionType": "custom"
},
{
"version": "6.7",
"status": "affected",
"lessThan": "6.7.143",
"versionType": "custom"
},
{
"version": "6.8",
"status": "affected",
"lessThan": "6.8.167",
"versionType": "custom"
}
]
} Reveal Vendor product
Publisher's version information Shown as published. These rules are not interpreted as NuGet package version ranges.
{
"product": "Reveal",
"vendor": "Tanium",
"versions": [
{
"version": "2.4",
"status": "affected",
"lessThan": "2.4.109",
"versionType": "custom"
},
{
"version": "2.5",
"status": "affected",
"lessThan": "2.5.166",
"versionType": "custom"
}
]
} Threat Response Vendor product
Publisher's version information Shown as published. These rules are not interpreted as NuGet package version ranges.
{
"product": "Threat Response",
"vendor": "Tanium",
"versions": [
{
"version": "4.9",
"status": "affected",
"lessThan": "4.9.480",
"versionType": "custom"
},
{
"version": "4.12",
"status": "affected",
"lessThan": "4.12.353",
"versionType": "custom"
},
{
"version": "4.17",
"status": "affected",
"lessThan": "4.17.333",
"versionType": "custom"
}
]
} Provision Host Vendor product
Publisher's version information Shown as published. These rules are not interpreted as NuGet package version ranges.
{
"product": "Provision Host",
"vendor": "Tanium",
"versions": [
{
"version": "10.4.100",
"status": "affected",
"lessThan": "10.4.100",
"versionType": "semver"
},
{
"version": "10.8.115",
"status": "affected",
"lessThan": "10.8.115",
"versionType": "semver"
},
{
"version": "10.9.113",
"status": "affected",
"lessThan": "10.9.113",
"versionType": "semver"
},
{
"version": "10.10.189",
"status": "affected",
"lessThan": "10.10.189",
"versionType": "semver"
},
{
"version": "10.11.127",
"status": "affected",
"lessThan": "10.11.127",
"versionType": "semver"
}
]
} Original source record · Cite this exact observation · Complete original publisher JSON