{"id":"CVE-2026-108326","title":"Tanium addressed an improper certificate validation vulnerability in Stream Client Extension.","summary":"Tanium addressed an improper certificate validation vulnerability in Stream Client Extension.","severity":"medium","cvss":6.5,"cvssVector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:L","cvssSource":"cna","cwe":["CWE-295"],"vendor":"Tanium","product":"Endpoint Configuration Toolset Solution","affected":["endpoint_configuration_toolset_solution >= 1.51 < 1.51.60","endpoint_configuration_toolset_solution >= 1.59 < 1.59.50","endpoint_configuration_toolset_solution >= 1.71 < 1.71.25","cx-stream >= 2.4.1184 < 2.4.1184","cx-stream >= 2.7.1160 < 2.7.1160","cx-stream >= 2.8.1465 < 2.8.1465","cx-stream >= 2.9.561 < 2.9.561"],"published":"2026-10-27","updated":"2026-10-27","sourceUpdated":"2026-10-27T17:35:05.870Z","source":"CVEORG","sourceUrl":"https://www.cve.org/CVERecord?id=CVE-2026-108326","references":[{"url":"https://security.tanium.com/TAN-2026-060","label":"TAN-2026-060"}],"tags":["cve.org"],"ingestedAt":"2026-10-27T17:54:31.823Z","slug":"CVE-2026-108326","body":"## Overview\n\nTanium addressed an improper certificate validation vulnerability in Stream Client Extension.\n\n## Affected\n\n- `endpoint_configuration_toolset_solution >= 1.51 < 1.51.60`\n- `endpoint_configuration_toolset_solution >= 1.59 < 1.59.50`\n- `endpoint_configuration_toolset_solution >= 1.71 < 1.71.25`\n- `cx-stream >= 2.4.1184 < 2.4.1184`\n- `cx-stream >= 2.7.1160 < 2.7.1160`\n- `cx-stream >= 2.8.1465 < 2.8.1465`\n- `cx-stream >= 2.9.561 < 2.9.561`\n\n## Remediation\n\nRefer to the linked advisories for vendor-supplied fixes and affected version ranges.","depth":"sunlit","depthScore":36,"depthScoreParts":{"impact":35.8,"likelihood":0,"exploitation":0,"ransomware":0},"changes":[]}