4.3
MediumCVSS 3.1 · from Tanium
CVE-2026-108316
Tanium addressed an information disclosure vulnerability in Tanium Server.
Tanium Server · Error message information leak · CWE-209AffectedTanium Server
FixUpdate to 7.7.3.8351, 7.8.2.1263, 7.8.4.1399 or newer
PublishedOct 27, 17:35 · Tanium
ScoredOct 27 · 4.3 · Tanium
Exploit code publicNone known · checked 21:18 UTC
ExploitedNone known · CISA KEV checked 22:10 UTC
What we know
No known exploitation. CISA KEV, checked 22:10 UTC.
No public exploit code known. Exploit-DB, Metasploit, Nuclei, checked 21:18 UTC.
An attacker needs network access and an account. CVSS: network, low privileges.
Description
Tanium addressed an information disclosure vulnerability in Tanium Server.
From Tanium
Affected and fixed versions
ProductAffectedFixed inTanium Server7.7.3 – before 7.7.3.83517.7.3.8351Tanium Server7.8.2 – before 7.8.2.12637.8.2.1263Tanium Server7.8.4 – before 7.8.4.13997.8.4.1399
Exploit code
Exploit-DBnone knownMetasploitnone knownNucleinone known