Improper Access Control Vulnerability in Tanium Discover
CVE-2026-116667

4.2MEDIUM

Key Information:

Vendor

Tanium

Status
Discover
Vendor
CVE Published:
3 November 2026

What is CVE-2026-116667?

Tanium has identified an improper access controls vulnerability in its Discover product. This security flaw could potentially allow unauthorized access, leading to exposure of sensitive data. Organizations using Tanium Discover are advised to review their security configurations and implement the necessary updates as issued by Tanium to mitigate potential risks. For detailed information, refer to the official reference TAN-2026-085.

Affected Version(s)

Discover 4.19.0 < 4.19.137

Discover 4.15.0 < 4.15.218

Discover 4.10.0 < 4.10.204

References

https://security.tanium.com/TAN-2026-085

CVSS V3.1

Score:
4.2
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Network
Attack Complexity:
High
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.