CVE-2026-121565 PUBLISHED

Tanium addressed an improper certificate validation vulnerability in multiple products

Assigner: Tanium
Reserved: 03.11.2026 Published: 03.11.2026 Updated: 03.11.2026

Tanium addressed an improper certificate validation vulnerability in multiple products. Products have been updated to distrust several intermediate CA certificates associated with compromised private keys.

Metrics

CVSS Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N
CVSS Score: 7.4

Product Status

Vendor Tanium
Product TanOS
Versions
  • affected from 1.8.5 to 1.8.5.0326 (excl.)
  • affected from 1.8.6 to 1.8.6.0193 (excl.)
  • affected from 1.9.0 to 1.9.0.0089 (excl.)
Vendor Tanium
Product Asset
Versions
  • affected from 1.33 to 1.33.334 (excl.)
  • affected from 1.36 to 1.36.182 (excl.)
  • affected from 1.39 to 1.39.164 (excl.)
Vendor Tanium
Product Comply
Versions
  • affected from 2.32 to 2.32.275 (excl.)
  • affected from 2.35 to 2.35.337 (excl.)
  • affected from 2.37 to 2.37.347 (excl.)
Vendor Tanium
Product Connect
Versions
  • affected from 5.29 to 5.29.272 (excl.)
  • affected from 5.37 to 5.37.177 (excl.)
  • affected from 5.47 to 5.47.135 (excl.)
Vendor Tanium
Product Integrity Monitor
Versions
  • affected from 3.6 to 3.6.608 (excl.)
  • affected from 3.7 to 3.7.383 (excl.)
  • affected from 3.8 to 3.8.362 (excl.)
Vendor Tanium
Product Health Check
Versions
  • affected from 1.13 to 1.13.653 (excl.)
Vendor Tanium
Product Endpoint Configuration Toolset Solution
Versions
  • affected from 1.51 to 1.51.61 (excl.)
  • affected from 1.59 to 1.59.51 (excl.)
  • affected from 1.71 to 1.71.26 (excl.)
Vendor Tanium
Product Patch
Versions
  • affected from 3.24 to 3.24.328 (excl.)
  • affected from 3.28 to 3.28.346 (excl.)
  • affected from 3.32 to 3.32.383 (excl.)
Vendor Tanium
Product Performance
Versions
  • affected from 1.22 to 1.22.355 (excl.)
  • affected from 1.23 to 1.23.318 (excl.)
  • affected from 1.25 to 1.25.196 (excl.)
Vendor Tanium
Product Reputation
Versions
  • affected from 6.6 to 6.6.150 (excl.)
  • affected from 6.7 to 6.7.143 (excl.)
  • affected from 6.8 to 6.8.167 (excl.)
Vendor Tanium
Product Reveal
Versions
  • affected from 2.4 to 2.4.109 (excl.)
  • affected from 2.5 to 2.5.166 (excl.)
Vendor Tanium
Product Threat Response
Versions
  • affected from 4.9 to 4.9.480 (excl.)
  • affected from 4.12 to 4.12.353 (excl.)
  • affected from 4.17 to 4.17.333 (excl.)
Vendor Tanium
Product Provision Host
Versions
  • affected from 10.4.100 to 10.4.100 (excl.)
  • affected from 10.8.115 to 10.8.115 (excl.)
  • affected from 10.9.113 to 10.9.113 (excl.)
  • affected from 10.10.189 to 10.10.189 (excl.)
  • affected from 10.11.127 to 10.11.127 (excl.)

References

Problem Types

  • Improper Certificate Validation CWE