CVE-2026-9208: Tanium addressed an unauthorized code execution vulnerability in Connect.

Published May 27, 2026
·
Updated

Tanium addressed an unauthorized code execution vulnerability in Connect.

Affected Software

4 affected components
Tanium Tanium Connect
Tanium Connect>=5.26.0<5.26.191
Tanium Connect>=5.29.0<5.29.237
Tanium Connect>=5.37.0<5.37.140

Remediation

Recommended actions to resolve this vulnerability, in priority order.

  1. Compensating control

    Apply the vendor-provided update/patch for Tanium Connect that addresses the unauthorized code execution vulnerability (follow Tanium's guidance/advisory for obtaining and installing the fix).

Event History

May 27, 2026
CVE Published
via MITRE·08:59 PM
Data Sourced
via MITRE·08:59 PM
DescriptionSeverityWeakness
Data Sourced
via NVD·10:16 PM
DescriptionSeverityWeaknessAffected Software
Apr 27, 58520
Event
via FIRST·10:49 PM

Frequently Asked Questions

1

What is the severity of CVE-2026-9208?

The severity of CVE-2026-9208 is rated as high, with a score of 8.8.

2

What type of vulnerability is CVE-2026-9208?

CVE-2026-9208 is classified as an unauthorized code execution vulnerability due to OS Command Injection.

3

How do I fix CVE-2026-9208?

To fix CVE-2026-9208, ensure that you update Tanium Connect to the latest version provided by Tanium.

4

What software is impacted by CVE-2026-9208?

CVE-2026-9208 impacts the Tanium Connect software.

5

How was CVE-2026-9208 addressed by Tanium?

Tanium addressed CVE-2026-9208 by releasing a security update to mitigate the unauthorized code execution risk.

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203