CVE-2026-121565
High
Description
Tanium addressed an improper certificate validation vulnerability in multiple products. Products have been updated to distrust several intermediate CA certificates associated with compromised private keys.
SeverityHigh
CVSS7.4
Exploit probability—
ProductTanOS
PublishedNov 3, 2026
First seenNov 4, 2026
Weakness typeCWE-295CWE-295
How to fix
Update
- Tanium TanOS1.8.5.0326, 1.8.6.0193, 1.9.0.0089 or later
- Tanium Asset1.33.334, 1.36.182, 1.39.164 or later
- Tanium Comply2.32.275, 2.35.337, 2.37.347 or later
- Tanium Connect5.29.272, 5.37.177, 5.47.135 or later
- Tanium Integrity Monitor3.6.608, 3.7.383, 3.8.362 or later
- Tanium Health Check1.13.653 or later
- Tanium Endpoint Configuration Toolset Solution1.51.61, 1.59.51, 1.71.26 or later
- Tanium Patch3.24.328, 3.28.346, 3.32.383 or later
- Tanium Performance1.22.355, 1.23.318, 1.25.196 or later
- Tanium Reputation6.6.150, 6.7.143, 6.8.167 or later
- Tanium Reveal2.4.109, 2.5.166 or later
- Tanium Threat Response4.9.480, 4.12.353, 4.17.333 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Tanium TanOS | 1.8.5 ≤ v < 1.8.5.0326, 1.8.6 ≤ v < 1.8.6.0193, 1.9.0 ≤ v < 1.9.0.0089 | 1.8.5.0326, 1.8.6.0193, 1.9.0.0089 |
| Tanium Asset | 1.33 ≤ v < 1.33.334, 1.36 ≤ v < 1.36.182, 1.39 ≤ v < 1.39.164 | 1.33.334, 1.36.182, 1.39.164 |
| Tanium Comply | 2.32 ≤ v < 2.32.275, 2.35 ≤ v < 2.35.337, 2.37 ≤ v < 2.37.347 | 2.32.275, 2.35.337, 2.37.347 |
| Tanium Connect | 5.29 ≤ v < 5.29.272, 5.37 ≤ v < 5.37.177, 5.47 ≤ v < 5.47.135 | 5.29.272, 5.37.177, 5.47.135 |
| Tanium Integrity Monitor | 3.6 ≤ v < 3.6.608, 3.7 ≤ v < 3.7.383, 3.8 ≤ v < 3.8.362 | 3.6.608, 3.7.383, 3.8.362 |
| Tanium Health Check | 1.13 ≤ v < 1.13.653 | 1.13.653 |
| Tanium Endpoint Configuration Toolset Solution | 1.51 ≤ v < 1.51.61, 1.59 ≤ v < 1.59.51, 1.71 ≤ v < 1.71.26 | 1.51.61, 1.59.51, 1.71.26 |
| Tanium Patch | 3.24 ≤ v < 3.24.328, 3.28 ≤ v < 3.28.346, 3.32 ≤ v < 3.32.383 | 3.24.328, 3.28.346, 3.32.383 |
| Tanium Performance | 1.22 ≤ v < 1.22.355, 1.23 ≤ v < 1.23.318, 1.25 ≤ v < 1.25.196 | 1.22.355, 1.23.318, 1.25.196 |
| Tanium Reputation | 6.6 ≤ v < 6.6.150, 6.7 ≤ v < 6.7.143, 6.8 ≤ v < 6.8.167 | 6.6.150, 6.7.143, 6.8.167 |
| Tanium Reveal | 2.4 ≤ v < 2.4.109, 2.5 ≤ v < 2.5.166 | 2.4.109, 2.5.166 |
| Tanium Threat Response | 4.9 ≤ v < 4.9.480, 4.12 ≤ v < 4.12.353, 4.17 ≤ v < 4.17.333 | 4.9.480, 4.12.353, 4.17.333 |
| Tanium Provision Host | 10.4.100, 10.8.115, 10.9.113, 10.10.189, 10.11.127 | 10.4.100, 10.8.115, 10.9.113, 10.10.189, 10.11.127 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.