Improper Certificate Validation in Tanium Products
CVE-2026-121565

7.4HIGH

Key Information:

Vendor

Tanium

Status
Tanos
Asset
Comply
Connect
Vendor
CVE Published:
3 November 2026

What is CVE-2026-121565?

Tanium has resolved an issue related to improper certificate validation across multiple products. This vulnerability allowed for the potential exploitation arising from the distrust of certain intermediate Certificate Authorities (CAs) linked to compromised private keys. By addressing this security flaw, Tanium enhances the integrity and trustworthiness of its communication channels within its products, ensuring that users are safeguarded against potential misuse of unauthorized certificates.

Affected Version(s)

Asset 1.33 < 1.33.334

Asset 1.36 < 1.36.182

Asset 1.39 < 1.39.164

References

https://security.tanium.com/TAN-2026-092

CVSS V3.1

Score:
7.4
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
High
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.