[ CVE-2026-108306 · Published 27 Oct 2026 ]

Vulnerability in Tanium Endpoint Configuration Toolset Solution

CVSS 7.8 EPSS <1%1 agency advisoryNo fix listed yet

[ Description ]Official description

Tanium addressed a local privilege escalation vulnerability in End-User Notifications.

[ Fixes ]Fixes and patches

No fix or interim patch is linked from our sources yet. Check the vendor references below and limit exposure of affected systems until a fix is available.

[ Advisories ]Government CERT advisories

BSI CERT-Bund27 Oct 2026WID-SEC-2026-4207

Tanium Endpoint Management: Multiple vulnerabilities Translated from German
CVE-2026-116656CVE-2026-108310CVE-2026-108307+25 more CVEs

[ References ]References

security.tanium.com/TAN-2026-065

[ Facts ]Key facts

CVE: CVE-2026-108306
EUVD: EUVD-2026-111262
Published: 27 Oct 2026, 18:17 UTC
Updated: 4 Nov 2026, 21:17 UTC
NVD status: Undergoing Analysis
CVSS 3.1: 7.8 High
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Scored by 3938794e-25f5-4123-a1ba-5cbd7f104512
EPSS: 0.14% chance of exploitation in 30 days · higher than 3% of CVEs
CISA SSVC: Exploitation: none · Automatable: no · Impact: total
Weakness: CWE-59

[ Affected ]Affected products

Tanium Endpoint Configuration Toolset Solution1.51 – < 1.51.60, 1.59 – < 1.59.50, 1.71 – < 1.71.25
Tanium end-user-cx1.8.47 – < 1.8.47, 1.11.605 – < 1.11.605, 1.19.325 – < 1.19.325, 1.21.835 – < 1.21.835, 1.22.1199 – < 1.22.1199, 1.23.766 – < 1.23.766

[ Description ]Official description

[ Fixes ]Fixes and patches

[ Advisories ]Government CERT advisories

Tanium Endpoint Management: Multiple vulnerabilities Translated from German

[ References ]References