What’s Vulnerable › Vulnerabilities

CVE-2026-108326: Tanium addressed an improper certificate validation vulnerability in Stream Client Extension.

• Severity: medium (CVSS 6.5 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.2% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2026-10-27 · updated 2026-10-28
• Weakness: CWE-295

Description

Tanium addressed an improper certificate validation vulnerability in Stream Client Extension.

Affected products

• Tanium cx-stream: from 2.4.1184 before 2.4.1184; from 2.7.1160 before 2.7.1160; from 2.8.1465 before 2.8.1465; from 2.9.561 before 2.9.561 — fixed in 2.4.1184, 2.7.1160, 2.8.1465, 2.9.561
• Tanium Endpoint Configuration Toolset Solution: from 1.51 before 1.51.60; from 1.59 before 1.59.50; from 1.71 before 1.71.25 — fixed in 1.51.60, 1.59.50, 1.71.25

How to fix

Upgrade to a fixed version: Tanium cx-stream 2.4.1184, 2.7.1160, 2.8.1465, 2.9.561; Tanium Endpoint Configuration Toolset Solution 1.51.60, 1.59.50, 1.71.25. Check the vendor advisory for mitigations.

References

• https://security.tanium.com/TAN-2026-060

Get alerted when CVE-2026-108326 or the next vulnerability affects your stack