Vulnerabilidades em Tanium

56 resultados
Análise Vexday

Com 52 CVEs catalogadas e nenhuma em exploração ativa no catálogo KEV da CISA, o Tanium apresenta taxa de exploração abaixo da média geral do catálogo, o que sugere um perfil de risco operacional relativamente contido no momento. A ausência de vulnerabilidades críticas e de provas de conceito públicas reforça esse cenário, embora 6 CVEs tenham surgido nos últimos 90 dias, indicando atividade recente de descoberta que merece acompanhamento. O tipo de falha mais recorrente é CWE-276 (permissões padrão incorretas), uma classe de fraqueza que tende a ser explorada em cadeias de ataque quando combinada com outros vetores. A CVE mais relevante no momento, CVE-2026-9208, apresenta EPSS de 0,0042, valor baixo que não sinaliza probabilidade elevada de exploração iminente, mas que deve ser monitorado à medida que novos detalhes técnicos eventualmente se tornem públicos.

CVE-2025-15341MEDIUMTanium addressed an incorrect default permissions vulnerability in Benchmark.EPSS 0.3%CVE-2025-15344MEDIUMTanium addressed a SQL injection vulnerability in Asset.EPSS 0.3%CVE-2026-2605MEDIUMTanium addressed an insertion of sensitive information into log file vulnerability in TanOS.EPSS 0.3%CVE-2026-6416LOWTanium addressed an uncontrolled resource consumption vulnerability in Interact.EPSS 0.3%CVE-2025-15325MEDIUMTanium addressed an improper input validation vulnerability in Discover.EPSS 0.2%CVE-2025-15321LOWTanium addressed an improper input validation vulnerability in Tanium Appliance.EPSS 0.2%CVE-2025-15322MEDIUMTanium addressed an improper access controls vulnerability in Tanium Server.EPSS 0.2%CVE-2026-2435MEDIUMASSET-7706EPSS 0.2%CVE-2025-15327MEDIUMTanium addressed an improper access controls vulnerability in Deploy.EPSS 0.2%CVE-2025-15326MEDIUMTanium addressed an improper access controls vulnerability in Patch.EPSS 0.2%CVE-2026-9156MEDIUMTanium addressed a denial of service vulnerability in Tanium Server.EPSS 0.2%CVE-2025-15334MEDIUMTanium addressed an information disclosure vulnerability in Threat Response.EPSS 0.2%CVE-2025-15335MEDIUMTanium addressed an information disclosure vulnerability in Threat Response.EPSS 0.2%CVE-2025-15288LOWTanium addressed an improper access controls vulnerability in Interact.EPSS 0.2%CVE-2025-15333MEDIUMTanium addressed an information disclosure vulnerability in Threat Response.EPSS 0.2%CVE-2025-15289LOWTanium addressed an improper access controls vulnerability in Interact.EPSS 0.2%CVE-2025-15342MEDIUMTanium addressed an improper access controls vulnerability in Reputation.EPSS 0.2%CVE-2026-6392LOWTanium addressed an information disclosure vulnerability in Threat Response.EPSS 0.2%CVE-2026-11391MEDIUMTanium addressed a SQL injection vulnerability in Patch.EPSS 0.2%CVE-2025-15319HIGHTanium addressed a local privilege escalation vulnerability in Patch Endpoint Tools.EPSS 0.2%