CVE-2026-116667
MediumCVSS 4.2Exploitation Probability (EPSS)
Low risk4th percentile - higher than 4% of all known CVEs
Summary
Tanium addressed an improper access controls vulnerability in the Discover module. Technical details were not provided in the description. The vulnerability may allow unauthorized access to module functions or data.
Risk Assessment
Improper access controls may allow users to perform operations or access data beyond their permissions. This may compromise the confidentiality and integrity of the Tanium environment.
Recommendation
Apply the fix provided by Tanium for the Discover module. Verify user permissions and roles in the Tanium console.
Other vulnerabilities in Tanium Discover
See all- CVE-2026-116669Medium
Tanium addressed an improper access controls vulnerability in the Discover module. Technical details were not provided in the description. The vulnerability may allow unauthorized access to module functions or data.
- CVE-2026-116668Medium
Tanium addressed an uncontrolled resource consumption vulnerability in the Discover module. Technical details were not provided in the description. The vulnerability may lead to exhaustion of system resources.
- CVE-2026-116666Medium
Tanium addressed an information disclosure vulnerability in Discover. Technical details were not provided in the description.
- CVE-2026-116665Medium
Tanium addressed an information disclosure vulnerability in Discover. Technical details were not provided in the description.
- CVE-2026-116664Low
Tanium addressed an improper access controls vulnerability in Discover. The flaw allowed bypassing access control mechanisms.
- CVE-2026-116648Medium
Tanium addressed an improper output sanitization vulnerability in Discover. Technical details were not provided in the description.
- CVE-2026-87076Medium
Tanium addressed an information disclosure vulnerability in Discover. Technical details were not provided in the description.
Original NVD description (English source)
Tanium addressed an improper access controls vulnerability in Discover.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS