[ CVE-2026-121565 · Published 3 Nov 2026 ]

Vulnerability in Tanium TanOS

CVSS 7.4 EPSS <1%No fix listed yet

[ Description ]Official description

Tanium addressed an improper certificate validation vulnerability in multiple products. Products have been updated to distrust several intermediate CA certificates associated with compromised private keys.

[ Fixes ]Fixes and patches

No fix or interim patch is linked from our sources yet. Check the vendor references below and limit exposure of affected systems until a fix is available.

[ References ]References

security.tanium.com/TAN-2026-092

[ Facts ]Key facts

CVE: CVE-2026-121565
EUVD: EUVD-2026-116547
Published: 3 Nov 2026, 23:17 UTC
Updated: 4 Nov 2026, 12:17 UTC
NVD status: Awaiting Analysis
CVSS 3.1: 7.4 High
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N
Scored by 3938794e-25f5-4123-a1ba-5cbd7f104512
EPSS: 0.16% chance of exploitation in 30 days · higher than 6% of CVEs
Weakness: CWE-295

[ Affected ]Affected products

Tanium TanOS1.8.5 – < 1.8.5.0326, 1.8.6 – < 1.8.6.0193, 1.9.0 – < 1.9.0.0089
Tanium Asset1.33 – < 1.33.334, 1.36 – < 1.36.182, 1.39 – < 1.39.164
Tanium Comply2.32 – < 2.32.275, 2.35 – < 2.35.337, 2.37 – < 2.37.347
Tanium Connect5.29 – < 5.29.272, 5.37 – < 5.37.177, 5.47 – < 5.47.135
Tanium Integrity Monitor3.6 – < 3.6.608, 3.7 – < 3.7.383, 3.8 – < 3.8.362
Tanium Health Check1.13 – < 1.13.653
Tanium Endpoint Configuration Toolset Solution1.51 – < 1.51.61, 1.59 – < 1.59.51, 1.71 – < 1.71.26
Tanium Patch3.24 – < 3.24.328, 3.28 – < 3.28.346, 3.32 – < 3.32.383
Tanium Performance1.25 – < 1.25.196
Tanium Reputation6.6 – < 6.6.150, 6.7 – < 6.7.143, 6.8 – < 6.8.167
Tanium Reveal2.4 – < 2.4.109, 2.5 – < 2.5.166
Tanium Threat Response4.9 – < 4.9.480, 4.12 – < 4.12.353, 4.17 – < 4.17.333