Skip to content

TAN-2026-075

Tanium addressed an unauthorized code execution vulnerability in Certificate Manager.

Severity: High

Base Score: 8.8

Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Impact

This vulnerability could allow an authenticated Tanium user with the Ask Dynamic Questions permission to execute unauthorized code on endpoints running the SSL Certificate Subject sensor.

Products Affected

2025H1 Release:

  • Certificate Manager prior to Update 26 (v1.17 to v1.17.417)

2025H2 Release:

  • Certificate Manager prior to Update 16 (v1.18 to v1.18.368)

2026H1 Release:

  • Certificate Manager prior to Update 9 (v1.22 to v1.22.119)

Available Updates

2025H1 Release:

  • Update 26 (Certificate Manager v1.17.417) and later

2025H2 Release:

  • Update 16 (Certificate Manager v1.18.368) and later

2026H1 Release:

  • Update 9 (Certificate Manager v1.22.119) and later

Workaround and Mitigations

None.

Acknowledgements

None.