Information Disclosure Vulnerability in Tanium Threat Response
CVE-2026-6392

2.7LOW

Key Information:

Vendor

Tanium

Status
Threat Response
Vendor
CVE Published:
22 April 2026

What is CVE-2026-6392?

An information disclosure vulnerability was identified in Tanium's Threat Response, which could potentially allow unauthorized access to sensitive data. This exposure can occur due to improper handling of certain data types, leading to potential leakage of information that should remain confidential. The vendor has taken measures to address this issue, ensuring that users of Threat Response are protected against such vulnerabilities. For detailed information, refer to TAN-2026-011.

Affected Version(s)

Threat Response 4.6.0 < 4.6.577

Threat Response 4.9.0 < 4.9.379

References

https://security.tanium.com/TAN-2026-011

CVSS V3.1

Score:
2.7
Severity:
LOW
Confidentiality:
Low
Integrity:
None
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
High
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.