WID-SEC-W-2026-0466

csafDEcert_bund

DeutschShown in its original language — a full translation is planned for a future version.

Tanium Endpoint Management: Mehrere Schwachstellen

view advisory published 2026-02-19

Ein entfernter authentisierter, lokaler Angreifer kann mehrere Schwachstellen in Tanium Endpoint Management ausnutzen, um seine Privilegien zu erhöhen, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand herbeizuführen oder Daten zu manipulieren.

01

describes (7)

Related CVEs.

IDseverity exploitable
CVE-2026-2605US——
Tanium addressed an insertion of sensitive information into log file vulnerability in TanOS.
CVE-2026-2435UShigh8.8—
Tanium addressed a SQL injection vulnerability in Asset.
CVE-2026-2408US——
Tanium addressed a use-after-free vulnerability in the Cloud Workloads Enforce client extension.
CVE-2026-2350US——
Tanium addressed an insertion of sensitive information into log file vulnerability in Interact and TDS.
CVE-2026-1292US——
Tanium addressed an insertion of sensitive information into log file vulnerability in Trends.
CVE-2026-1344USmedium5.5—
Tanium addressed an insecure file permissions vulnerability in Enforce Recovery Key Portal.
CVE-2025-15467US—Exploit
Issue summary: Parsing CMS AuthEnvelopedData or EnvelopedData message with maliciously crafted AEAD parameters can trigger a stack buffer overflow. Impact summary: A stack buffer…
02

references

External citations — patches, advisories, analysis.

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan