CVE-2026-108311: Tanium addressed an insufficient logging vulnerability in Tanium Server.
Published Oct 27, 2026
·Updated
Tanium addressed an insufficient logging vulnerability in Tanium Server.
Affected Software
1 affected component
Tanium Tanium Server
Event History
Oct 27, 2026
CVE Published
via MITRE·05:35 PM
Data Sourced
via MITRE·05:35 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What level of access does an attacker need to exploit this issue?
The vulnerability requires high privileges (PR:H). It is not exploitable by an unauthenticated or low-privileged remote attacker based on the provided vector.
2
Can this be exploited remotely or does it require user interaction?
The attack vector is network-based (AV:N), and no user interaction is required (UI:N). Exploitation has low attack complexity (AC:L).
3
What is the expected security impact?
The stated impact is limited to integrity (I:L). No confidentiality or availability impact is indicated (C:N/A:N), and the severity score is 2.7 (low).