CVE Field Guide
About Us
CVE-2026-116648
PUBLISHED
Tanium addressed an improper output sanitization vulnerability in Discover.
Assigner:
Tanium
Reserved:
26.10.2026
Published:
03.11.2026
Updated:
03.11.2026
Tanium addressed an improper output sanitization vulnerability in Discover.
Metrics
CVSS 3.1
CVSS Vector:
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:N/I:N/A:L
CVSS Score:
4.1
CVSS score
4.1
Attack Vector
Network
Scope
Changed
Attack Complexity
Low
Confidentiality Impact
None
Privileges Required
Low
Integrity Impact
None
User Interaction
Required
Availability Impact
Low
CVSS 3.1
Product Status
Vendor
Tanium
Product
Discover
Versions
affected from 4.19.0 to 4.19.137 (excl.)
affected from 4.15.0 to 4.15.218 (excl.)
affected from 4.10.0 to 4.10.204 (excl.)
References
TAN-2026-084
Problem Types
Improper Neutralization of Formula Elements in a CSV File
CWE