CVE Field Guide
About Us
CVE-2026-12139
PUBLISHED
Tanium addressed an information disclosure vulnerability in Connect.
Assigner:
Tanium
Reserved:
12.06.2026
Published:
21.07.2026
Updated:
21.07.2026
Tanium addressed an information disclosure vulnerability in Connect.
Metrics
CVSS 3.1
CVSS Vector:
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N
CVSS Score:
4.4
CVSS score
4.4
Attack Vector
Local
Scope
Unchanged
Attack Complexity
Low
Confidentiality Impact
High
Privileges Required
High
Integrity Impact
None
User Interaction
None
Availability Impact
None
CVSS 3.1
Product Status
Vendor
Tanium
Product
Connect
Versions
affected from 5.29.251 to 5.29.251 (excl.)
affected from 5.37.156 to 5.37.156 (excl.)
affected from 5.47.112 to 5.47.112 (excl.)
References
TAN-2026-018
Problem Types
Invocation of Process Using Visible Sensitive Information
CWE