CVE-2026-108329
HighCVSS 8.8Exploitation Probability (EPSS)
Low risk42th percentile - higher than 42% of all known CVEs
Summary
Tanium addressed an unauthorized code execution vulnerability in Threat Response. The flaw may allow code to be executed without appropriate permissions.
Risk Assessment
An attacker may execute unauthorized code in the Threat Response environment, potentially leading to system compromise or data breach. This could weaken the organization's threat response capability.
Recommendation
Deploy the update released by Tanium for the Threat Response module. Restrict access to the module to necessary authorized users.
Other vulnerabilities in Tanium Threat Response
See all- CVE-2026-87116Medium
Tanium addressed a server-side request forgery vulnerability in Threat Response. Technical details were not provided in the description.
- CVE-2026-87113Medium
Tanium addressed an improper access controls vulnerability in Threat Response. Technical details were not provided in the description.
- CVE-2026-87105High
Tanium addressed a SQL injection vulnerability in Threat Response. Technical details were not provided in the description.
- CVE-2026-87026Low
Tanium addressed an improper access controls vulnerability in Threat Response. The flaw could allow access to resources or functions without the required permissions.
- CVE-2026-75476Low
Tanium addressed a compression bomb vulnerability in Threat Response.
- CVE-2026-6392Low
Tanium addressed an information disclosure vulnerability in Threat Response.
Original NVD description (English source)
Tanium addressed an unauthorized code execution vulnerability in Threat Response.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS