CVE-2026-116648
MediumCVSS 4.1Exploitation Probability (EPSS)
Low risk10th percentile - higher than 10% of all known CVEs
Summary
Tanium addressed an improper output sanitization vulnerability in Discover. Technical details were not provided in the description.
Risk Assessment
Improper output sanitization may allow content injection or execution of unwanted actions in the user's context.
Recommendation
Update Tanium software to a version containing the fix and verify the security of the Discover module.
Other vulnerabilities in Tanium Discover
See all- CVE-2026-116669Medium
Tanium addressed an improper access controls vulnerability in the Discover module. Technical details were not provided in the description. The vulnerability may allow unauthorized access to module functions or data.
- CVE-2026-116668Medium
Tanium addressed an uncontrolled resource consumption vulnerability in the Discover module. Technical details were not provided in the description. The vulnerability may lead to exhaustion of system resources.
- CVE-2026-116667Medium
Tanium addressed an improper access controls vulnerability in the Discover module. Technical details were not provided in the description. The vulnerability may allow unauthorized access to module functions or data.
- CVE-2026-116666Medium
Tanium addressed an information disclosure vulnerability in Discover. Technical details were not provided in the description.
- CVE-2026-116665Medium
Tanium addressed an information disclosure vulnerability in Discover. Technical details were not provided in the description.
- CVE-2026-116664Low
Tanium addressed an improper access controls vulnerability in Discover. The flaw allowed bypassing access control mechanisms.
- CVE-2026-87076Medium
Tanium addressed an information disclosure vulnerability in Discover. Technical details were not provided in the description.
Original NVD description (English source)
Tanium addressed an improper output sanitization vulnerability in Discover.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS