CVE-2026-6392
LowCVSS 2.7Exploitation Probability (EPSS)
Low risk9th percentile - higher than 9% of all known CVEs
Summary
Tanium addressed an information disclosure vulnerability in Threat Response.
Risk Assessment
Information disclosure may allow unauthorized parties to obtain sensitive data from the Tanium Threat Response environment.
Recommendation
Apply the update provided by Tanium for Threat Response to remediate the vulnerability.
Other vulnerabilities in Tanium Threat Response
See all- CVE-2026-108329High
Tanium addressed an unauthorized code execution vulnerability in Threat Response. The flaw may allow code to be executed without appropriate permissions.
- CVE-2026-87116Medium
Tanium addressed a server-side request forgery vulnerability in Threat Response. Technical details were not provided in the description.
- CVE-2026-87113Medium
Tanium addressed an improper access controls vulnerability in Threat Response. Technical details were not provided in the description.
- CVE-2026-87105High
Tanium addressed a SQL injection vulnerability in Threat Response. Technical details were not provided in the description.
- CVE-2026-87026Low
Tanium addressed an improper access controls vulnerability in Threat Response. The flaw could allow access to resources or functions without the required permissions.
- CVE-2026-75476Low
Tanium addressed a compression bomb vulnerability in Threat Response.
Original NVD description (English source)
Tanium addressed an information disclosure vulnerability in Threat Response.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS