6.6
MediumCVSS 3.1 · from Tanium
CVE-2026-108313
Tanium addressed an incorrect privilege assignment vulnerability in Tanium Server.
Tanium Server · CWE-178 · CWE-178AffectedTanium Server
FixUpdate to 7.7.3.8351, 7.8.2.1263, 7.8.4.1399 or newer
PublishedOct 27, 17:35 · Tanium
ScoredOct 27 · 6.6 · Tanium
Exploit code publicNone known · checked 21:18 UTC
ExploitedNone known · CISA KEV checked 22:10 UTC
What we know
No known exploitation. CISA KEV, checked 22:10 UTC.
No public exploit code known. Exploit-DB, Metasploit, Nuclei, checked 21:18 UTC.
An attacker needs network access and an account. CVSS: network, high privileges.
It only works under certain conditions, which makes it harder to pull off. CVSS: high attack complexity.
A successful attack can read and change data and take the service down. CVSS: high impact on confidentiality, integrity and availability.
Description
Tanium addressed an incorrect privilege assignment vulnerability in Tanium Server.
From Tanium
Affected and fixed versions
ProductAffectedFixed inTanium Server7.7.3 – before 7.7.3.83517.7.3.8351Tanium Server7.8.2 – before 7.8.2.12637.8.2.1263Tanium Server7.8.4 – before 7.8.4.13997.8.4.1399
Exploit code
Exploit-DBnone knownMetasploitnone knownNucleinone known