CVE-2026-108326Medium· 6.5▾ SunlitTanium addressed an improper certificate validation vulnerability in Stream Client Extension.
▾ Sunlit zone — Low / medium · no exploitation signal
impact 35.8 · likelihood 0 · exploitation 0
Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.
Tanium addressed an improper certificate validation vulnerability in Stream Client Extension.
endpoint_configuration_toolset_solution >= 1.51 < 1.51.60endpoint_configuration_toolset_solution >= 1.59 < 1.59.50endpoint_configuration_toolset_solution >= 1.71 < 1.71.25cx-stream >= 2.4.1184 < 2.4.1184cx-stream >= 2.7.1160 < 2.7.1160cx-stream >= 2.8.1465 < 2.8.1465cx-stream >= 2.9.561 < 2.9.561Refer to the linked advisories for vendor-supplied fixes and affected version ranges.
Connected by shared product, vendor, weakness, or advisory.
CVE-2026-108305High· 7.8Tanium addressed a local privilege escalation vulnerability in End-User Notifications.
CVE-2026-108331Low· 3.3Tanium addressed an infinite loop vulnerability in Threat Response Client Extension.
CVE-2026-108307High· 7.8Tanium addressed a heap-based buffer overflow vulnerability in Index.
CVE-2026-108333Low· 2.5Tanium addressed a use-after-free vulnerability in Threat Response Client Extension.
CVE-2026-108330Low· 3.6Tanium addressed an information disclosure vulnerability in Threat Response Client Extension.
CVE-2026-108309Medium· 5.5Tanium addressed an uncontrolled resource consumption vulnerability in Performance Client Extension.