Improper Certificate Validation in Tanium Stream Client Extension
CVE-2026-108326

6.5MEDIUM

Key Information:

Vendor

Tanium

Status
Endpoint Configuration Toolset Solution
Cx-stream
Vendor
CVE Published:
27 October 2026

What is CVE-2026-108326?

Tanium’s Stream Client Extension has a security flaw related to improper certificate validation. This vulnerability may allow attackers to intercept and manipulate communications if exploited, potentially compromising system integrity and confidentiality. Users of the affected extension are advised to apply the necessary updates to mitigate associated risks.

Affected Version(s)

cx-stream 2.4.1184

cx-stream 2.7.1160

cx-stream 2.8.1465

References

https://security.tanium.com/TAN-2026-060

CVSS V3.1

Score:
6.5
Severity:
MEDIUM
Confidentiality:
High
Integrity:
None
Availability:
High
Attack Vector:
Network
Attack Complexity:
High
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.