CVE-2026-121565: Tanium addressed an improper certificate validation vulnerability in multiple products
Tanium addressed an improper certificate validation vulnerability in multiple products. Products have been updated to distrust several intermediate CA certificates associated with compromised private keys.
Event History
Frequently Asked Questions
What does an attacker need to exploit this issue?
The available data indicates exploitation is network-based and requires no privileges or user interaction. It is rated high complexity, so additional conditions are required, but those conditions are not specified.
What is the potential impact if exploitation succeeds?
Successful exploitation could result in high confidentiality and integrity impact. No availability impact is indicated.
What mitigation is identified by the vendor?
Tanium has updated affected products to distrust several intermediate CA certificates associated with compromised private keys. The provided data does not identify the affected product versions or an alternative workaround.