CVE-2026-121565
Awaiting Analysis
Awaiting Analysis - Queue
Improper Certificate Validation in Tanium Products
Vulnerability report for CVE-2026-121565, including description, CVSS score, EPSS score, affected products, exploitability, helpful resources, and attack-flow context.
Publication date: 2026-11-03
Last updated on: 2026-11-03
Assigner: Tanium
Description
Description
Tanium addressed an improper certificate validation vulnerability in multiple products. Products have been updated to distrust several intermediate CA certificates associated with compromised private keys.
CVSS Scores
EPSS Scores
| Probability: | |
| Percentile: |
Meta Information
Affected Vendors & Products
| Vendor | Product | Version / Range |
|---|---|---|
| Tanium | TanOS | 1.8.5 |
| Tanium | TanOS | 1.8.6 |
| Tanium | TanOS | 1.9.0 |
| Tanium | Asset | 1.33 |
| Tanium | Asset | 1.36 |
| Tanium | Asset | 1.39 |
| Tanium | Comply | 2.32 |
| Tanium | Comply | 2.35 |
| Tanium | Comply | 2.37 |
| Tanium | Connect | 5.29 |
| Tanium | Connect | 5.37 |
| Tanium | Connect | 5.47 |
| Tanium | Integrity Monitor | 3.6 |
| Tanium | Integrity Monitor | 3.7 |
| Tanium | Integrity Monitor | 3.8 |
| Tanium | Health Check | 1.13 |
| Tanium | Endpoint Configuration Toolset Solution | 1.51 |
| Tanium | Endpoint Configuration Toolset Solution | 1.59 |
| Tanium | Endpoint Configuration Toolset Solution | 1.71 |
| Tanium | Patch | 3.24 |
| Tanium | Patch | 3.28 |
| Tanium | Patch | 3.32 |
| Tanium | Performance | 1.22 |
| Tanium | Performance | 1.23 |
| Tanium | Performance | 1.25 |
| Tanium | Reputation | 6.6 |
| Tanium | Reputation | 6.7 |
| Tanium | Reputation | 6.8 |
| Tanium | Reveal | 2.4 |
| Tanium | Reveal | 2.5 |
| Tanium | Threat Response | 4.9 |
| Tanium | Threat Response | 4.12 |
| Tanium | Threat Response | 4.17 |
| Tanium | Provision Host | 10.4.100 |
| Tanium | Provision Host | 10.8.115 |
| Tanium | Provision Host | 10.9.113 |
| Tanium | Provision Host | 10.10.189 |
| Tanium | Provision Host | 10.11.127 |
Helpful Resources
Exploitability
CWE
KEV
| CWE ID | Description |
|---|---|
| CWE-295 | The product does not validate, or incorrectly validates, a certificate. |
