WID-SEC-W-2026-0466

Vulnerability from csaf_certbund - Published: 2026-02-19 23:00 - Updated: 2026-02-19 23:00
Summary
Tanium Endpoint Management: Mehrere Schwachstellen
Severity
Mittel
Notes
Das BSI ist als Anbieter für die eigenen, zur Nutzung bereitgestellten Inhalte nach den allgemeinen Gesetzen verantwortlich. Nutzerinnen und Nutzer sind jedoch dafür verantwortlich, die Verwendung und/oder die Umsetzung der mit den Inhalten bereitgestellten Informationen sorgfältig im Einzelfall zu prüfen.
Produktbeschreibung: Tanium Endpoint Management bietet Echtzeit-Sichtbarkeit und Kontrolle über alle Endpunkte in einer IT-Umgebung.
Angriff: Ein entfernter authentisierter, lokaler Angreifer kann mehrere Schwachstellen in Tanium Endpoint Management ausnutzen, um seine Privilegien zu erhöhen, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand herbeizuführen oder Daten zu manipulieren.
Betroffene Betriebssysteme: - Sonstiges - UNIX - Windows
CVE-2025-15467
Affected products
Product Identifier Version Remediation
Tanium Endpoint Management Endpoint Configuration Toolset Solution <Update 21 v1.47.47
Tanium / Endpoint Management
 Endpoint Configuration Toolset Solution <Update 21 v1.47.47
Tanium Endpoint Management Endpoint Configuration Toolset Solution <Update 5 v1.59.26
Tanium / Endpoint Management
 Endpoint Configuration Toolset Solution <Update 5 v1.59.26
Tanium Endpoint Management Endpoint Configuration Toolset Solution <Update 14 v1.51.37
Tanium / Endpoint Management
 Endpoint Configuration Toolset Solution <Update 14 v1.51.37
CVE-2026-1292
Affected products
Product Identifier Version Remediation
Tanium Endpoint Management Trends <Update 3 v3.11.79
Tanium / Endpoint Management
 Trends <Update 3 v3.11.79
Tanium Endpoint Management Trends <Update 13 v3.11.79
Tanium / Endpoint Management
 Trends <Update 13 v3.11.79
Tanium Endpoint Management Trends <Update 20 v3.10.20
Tanium / Endpoint Management
 Trends <Update 20 v3.10.20
CVE-2026-1344
Affected products
Product Identifier Version Remediation
Tanium Endpoint Management Enforce Recovery Key Portal <v1.62.5
Tanium / Endpoint Management
 Enforce Recovery Key Portal <v1.62.5
CVE-2026-2350
Affected products
Product Identifier Version Remediation
Tanium Endpoint Management Interact <Update 14 v3.5.102
Tanium / Endpoint Management
 Interact <Update 14 v3.5.102
Tanium Endpoint Management Interact <Update 21 v3.2.196
Tanium / Endpoint Management
 Interact <Update 21 v3.2.196
Tanium Endpoint Management TDS <Update 5 TDS v4.1.257
Tanium / Endpoint Management
 TDS <Update 5 TDS v4.1.257
CVE-2026-2408
Affected products
Product Identifier Version Remediation
Tanium Endpoint Management Cloud Workloads <Update 14 v1.0.222
Tanium / Endpoint Management
 Cloud Workloads <Update 14 v1.0.222
Tanium Endpoint Management Cloud Workloads <Update 5 v1.0.222
Tanium / Endpoint Management
 Cloud Workloads <Update 5 v1.0.222
CVE-2026-2435
Affected products
Product Identifier Version Remediation
Tanium Endpoint Management Asset <Update 5 v1.36.108
Tanium / Endpoint Management
 Asset <Update 5 v1.36.108
Tanium Endpoint Management Asset <Update 21 v1.32.179
Tanium / Endpoint Management
 Asset <Update 21 v1.32.179
Tanium Endpoint Management Asset <Update 14 v1.33.269
Tanium / Endpoint Management
 Asset <Update 14 v1.33.269
CVE-2026-2605
Affected products
Product Identifier Version Remediation
Tanium Endpoint Management TanOS <Update 21 v1.8.4.0249
Tanium / Endpoint Management
 TanOS <Update 21 v1.8.4.0249
Tanium Endpoint Management TanOS <Update 14 v1.8.5.0282
Tanium / Endpoint Management
 TanOS <Update 14 v1.8.5.0282
Tanium Endpoint Management TanOS <Update 5 v1.8.6.01503
Tanium / Endpoint Management
 TanOS <Update 5 v1.8.6.01503
References
To clipboard 

{
  "document": {
    "aggregate_severity": {
      "text": "mittel"
    },
    "category": "csaf_base",
    "csaf_version": "2.0",
    "distribution": {
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "de-DE",
    "notes": [
      {
        "category": "legal_disclaimer",
        "text": "Das BSI ist als Anbieter f\u00fcr die eigenen, zur Nutzung bereitgestellten Inhalte nach den allgemeinen Gesetzen verantwortlich. Nutzerinnen und Nutzer sind jedoch daf\u00fcr verantwortlich, die Verwendung und/oder die Umsetzung der mit den Inhalten bereitgestellten Informationen sorgf\u00e4ltig im Einzelfall zu pr\u00fcfen."
      },
      {
        "category": "description",
        "text": "Tanium Endpoint Management bietet Echtzeit-Sichtbarkeit und Kontrolle \u00fcber alle Endpunkte in einer IT-Umgebung.",
        "title": "Produktbeschreibung"
      },
      {
        "category": "summary",
        "text": "Ein entfernter authentisierter, lokaler Angreifer kann mehrere Schwachstellen in Tanium Endpoint Management ausnutzen, um seine Privilegien zu erh\u00f6hen, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand herbeizuf\u00fchren oder Daten zu manipulieren.",
        "title": "Angriff"
      },
      {
        "category": "general",
        "text": "- Sonstiges\n- UNIX\n- Windows",
        "title": "Betroffene Betriebssysteme"
      }
    ],
    "publisher": {
      "category": "other",
      "contact_details": "csaf-provider@cert-bund.de",
      "name": "Bundesamt f\u00fcr Sicherheit in der Informationstechnik",
      "namespace": "https://www.bsi.bund.de"
    },
    "references": [
      {
        "category": "self",
        "summary": "WID-SEC-W-2026-0466 - CSAF Version",
        "url": "https://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-0466.json"
      },
      {
        "category": "self",
        "summary": "WID-SEC-2026-0466 - Portal Version",
        "url": "https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-0466"
      },
      {
        "category": "external",
        "summary": "Tanium Security Advisories vom 2026-02-19",
        "url": "https://security.tanium.com/TAN-2026-003/"
      },
      {
        "category": "external",
        "summary": "Tanium Security Advisories vom 2026-02-19",
        "url": "https://security.tanium.com/TAN-2026-004/"
      },
      {
        "category": "external",
        "summary": "Tanium Security Advisories vom 2026-02-19",
        "url": "https://security.tanium.com/TAN-2026-005/"
      },
      {
        "category": "external",
        "summary": "Tanium Security Advisories vom 2026-02-19",
        "url": "https://security.tanium.com/TAN-2026-006/"
      },
      {
        "category": "external",
        "summary": "Tanium Security Advisories vom 2026-02-19",
        "url": "https://security.tanium.com/TAN-2026-007/"
      },
      {
        "category": "external",
        "summary": "Tanium Security Advisories vom 2026-02-19",
        "url": "https://security.tanium.com/TAN-2026-008/"
      },
      {
        "category": "external",
        "summary": "Tanium Security Advisories vom 2026-02-19",
        "url": "https://security.tanium.com/TAN-2026-009/"
      }
    ],
    "source_lang": "en-US",
    "title": "Tanium Endpoint Management: Mehrere Schwachstellen",
    "tracking": {
      "current_release_date": "2026-02-19T23:00:00.000+00:00",
      "generator": {
        "date": "2026-02-20T11:35:44.908+00:00",
        "engine": {
          "name": "BSI-WID",
          "version": "1.5.0"
        }
      },
      "id": "WID-SEC-W-2026-0466",
      "initial_release_date": "2026-02-19T23:00:00.000+00:00",
      "revision_history": [
        {
          "date": "2026-02-19T23:00:00.000+00:00",
          "number": "1",
          "summary": "Initiale Fassung"
        }
      ],
      "status": "final",
      "version": "1"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "Enforce Recovery Key Portal \u003cv1.62.5",
                "product": {
                  "name": "Tanium Endpoint Management Enforce Recovery Key Portal \u003cv1.62.5",
                  "product_id": "T051037"
                }
              },
              {
                "category": "product_version",
                "name": "Enforce Recovery Key Portal v1.62.5",
                "product": {
                  "name": "Tanium Endpoint Management Enforce Recovery Key Portal v1.62.5",
                  "product_id": "T051037-fixed",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:tanium:endpoint_management:enforce_recovery_key_portal__v1.62.5"
                  }
                }
              },
              {
                "category": "product_version_range",
                "name": "Asset \u003cUpdate 21 v1.32.179",
                "product": {
                  "name": "Tanium Endpoint Management Asset \u003cUpdate 21 v1.32.179",
                  "product_id": "T051038"
                }
              },
              {
                "category": "product_version",
                "name": "Asset Update 21 v1.32.179",
                "product": {
                  "name": "Tanium Endpoint Management Asset Update 21 v1.32.179",
                  "product_id": "T051038-fixed",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:tanium:endpoint_management:asset__update_21_v1.32.179"
                  }
                }
              },
              {
                "category": "product_version_range",
                "name": "Asset \u003cUpdate 14 v1.33.269",
                "product": {
                  "name": "Tanium Endpoint Management Asset \u003cUpdate 14 v1.33.269",
                  "product_id": "T051039"
                }
              },
              {
                "category": "product_version",
                "name": "Asset Update 14 v1.33.269",
                "product": {
                  "name": "Tanium Endpoint Management Asset Update 14 v1.33.269",
                  "product_id": "T051039-fixed",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:tanium:endpoint_management:asset__update_14_v1.33.269"
                  }
                }
              },
              {
                "category": "product_version_range",
                "name": "Asset \u003cUpdate 5 v1.36.108",
                "product": {
                  "name": "Tanium Endpoint Management Asset \u003cUpdate 5 v1.36.108",
                  "product_id": "T051040"
                }
              },
              {
                "category": "product_version",
                "name": "Asset Update 5 v1.36.108",
                "product": {
                  "name": "Tanium Endpoint Management Asset Update 5 v1.36.108",
                  "product_id": "T051040-fixed",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:tanium:endpoint_management:asset__update_5_v1.36.108"
                  }
                }
              },
              {
                "category": "product_version_range",
                "name": "Cloud Workloads \u003cUpdate 14 v1.0.222",
                "product": {
                  "name": "Tanium Endpoint Management Cloud Workloads \u003cUpdate 14 v1.0.222",
                  "product_id": "T051041"
                }
              },
              {
                "category": "product_version",
                "name": "Cloud Workloads Update 14 v1.0.222",
                "product": {
                  "name": "Tanium Endpoint Management Cloud Workloads Update 14 v1.0.222",
                  "product_id": "T051041-fixed",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:tanium:endpoint_management:cloud_workloads__update_14_v1.0.222"
                  }
                }
              },
              {
                "category": "product_version_range",
                "name": "Cloud Workloads \u003cUpdate 5 v1.0.222",
                "product": {
                  "name": "Tanium Endpoint Management Cloud Workloads \u003cUpdate 5 v1.0.222",
                  "product_id": "T051042"
                }
              },
              {
                "category": "product_version",
                "name": "Cloud Workloads Update 5 v1.0.222",
                "product": {
                  "name": "Tanium Endpoint Management Cloud Workloads Update 5 v1.0.222",
                  "product_id": "T051042-fixed",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:tanium:endpoint_management:cloud_workloads__update_5_v1.0.222"
                  }
                }
              },
              {
                "category": "product_version_range",
                "name": "TanOS \u003cUpdate 21 v1.8.4.0249",
                "product": {
                  "name": "Tanium Endpoint Management TanOS \u003cUpdate 21 v1.8.4.0249",
                  "product_id": "T051043"
                }
              },
              {
                "category": "product_version",
                "name": "TanOS Update 21 v1.8.4.0249",
                "product": {
                  "name": "Tanium Endpoint Management TanOS Update 21 v1.8.4.0249",
                  "product_id": "T051043-fixed",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:tanium:endpoint_management:tanos__update_21_v1.8.4.0249"
                  }
                }
              },
              {
                "category": "product_version_range",
                "name": "TanOS \u003cUpdate 14 v1.8.5.0282",
                "product": {
                  "name": "Tanium Endpoint Management TanOS \u003cUpdate 14 v1.8.5.0282",
                  "product_id": "T051044"
                }
              },
              {
                "category": "product_version",
                "name": "TanOS Update 14 v1.8.5.0282",
                "product": {
                  "name": "Tanium Endpoint Management TanOS Update 14 v1.8.5.0282",
                  "product_id": "T051044-fixed",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:tanium:endpoint_management:tanos__update_14_v1.8.5.0282"
                  }
                }
              },
              {
                "category": "product_version_range",
                "name": "Trends \u003cUpdate 20 v3.10.20",
                "product": {
                  "name": "Tanium Endpoint Management Trends \u003cUpdate 20 v3.10.20",
                  "product_id": "T051046"
                }
              },
              {
                "category": "product_version",
                "name": "Trends Update 20 v3.10.20",
                "product": {
                  "name": "Tanium Endpoint Management Trends Update 20 v3.10.20",
                  "product_id": "T051046-fixed",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:tanium:endpoint_management:trends__update_20_v3.10.20"
                  }
                }
              },
              {
                "category": "product_version_range",
                "name": "Trends \u003cUpdate 13 v3.11.79",
                "product": {
                  "name": "Tanium Endpoint Management Trends \u003cUpdate 13 v3.11.79",
                  "product_id": "T051047"
                }
              },
              {
                "category": "product_version",
                "name": "Trends Update 13 v3.11.79",
                "product": {
                  "name": "Tanium Endpoint Management Trends Update 13 v3.11.79",
                  "product_id": "T051047-fixed",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:tanium:endpoint_management:trends__update_13_v3.11.79"
                  }
                }
              },
              {
                "category": "product_version_range",
                "name": "Trends \u003cUpdate 3 v3.11.79",
                "product": {
                  "name": "Tanium Endpoint Management Trends \u003cUpdate 3 v3.11.79",
                  "product_id": "T051048"
                }
              },
              {
                "category": "product_version",
                "name": "Trends Update 3 v3.11.79",
                "product": {
                  "name": "Tanium Endpoint Management Trends Update 3 v3.11.79",
                  "product_id": "T051048-fixed",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:tanium:endpoint_management:trends__update_3_v3.11.79"
                  }
                }
              },
              {
                "category": "product_version_range",
                "name": "Interact \u003cUpdate 21 v3.2.196",
                "product": {
                  "name": "Tanium Endpoint Management Interact \u003cUpdate 21 v3.2.196",
                  "product_id": "T051049"
                }
              },
              {
                "category": "product_version",
                "name": "Interact Update 21 v3.2.196",
                "product": {
                  "name": "Tanium Endpoint Management Interact Update 21 v3.2.196",
                  "product_id": "T051049-fixed",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:tanium:endpoint_management:interact__update_21_v3.2.196"
                  }
                }
              },
              {
                "category": "product_version_range",
                "name": "Interact \u003cUpdate 14 v3.5.102",
                "product": {
                  "name": "Tanium Endpoint Management Interact \u003cUpdate 14 v3.5.102",
                  "product_id": "T051050"
                }
              },
              {
                "category": "product_version",
                "name": "Interact Update 14 v3.5.102",
                "product": {
                  "name": "Tanium Endpoint Management Interact Update 14 v3.5.102",
                  "product_id": "T051050-fixed",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:tanium:endpoint_management:interact__update_14_v3.5.102"
                  }
                }
              },
              {
                "category": "product_version_range",
                "name": "Endpoint Configuration Toolset Solution \u003cUpdate 21 v1.47.47",
                "product": {
                  "name": "Tanium Endpoint Management Endpoint Configuration Toolset Solution \u003cUpdate 21 v1.47.47",
                  "product_id": "T051052"
                }
              },
              {
                "category": "product_version",
                "name": "Endpoint Configuration Toolset Solution Update 21 v1.47.47",
                "product": {
                  "name": "Tanium Endpoint Management Endpoint Configuration Toolset Solution Update 21 v1.47.47",
                  "product_id": "T051052-fixed",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:tanium:endpoint_management:endpoint_configuration_toolset_solution__update_21_v1.47.47"
                  }
                }
              },
              {
                "category": "product_version_range",
                "name": "Endpoint Configuration Toolset Solution \u003cUpdate 14 v1.51.37",
                "product": {
                  "name": "Tanium Endpoint Management Endpoint Configuration Toolset Solution \u003cUpdate 14 v1.51.37",
                  "product_id": "T051053"
                }
              },
              {
                "category": "product_version",
                "name": "Endpoint Configuration Toolset Solution Update 14 v1.51.37",
                "product": {
                  "name": "Tanium Endpoint Management Endpoint Configuration Toolset Solution Update 14 v1.51.37",
                  "product_id": "T051053-fixed",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:tanium:endpoint_management:endpoint_configuration_toolset_solution__update_14_v1.51.37"
                  }
                }
              },
              {
                "category": "product_version_range",
                "name": "Endpoint Configuration Toolset Solution \u003cUpdate 5 v1.59.26",
                "product": {
                  "name": "Tanium Endpoint Management Endpoint Configuration Toolset Solution \u003cUpdate 5 v1.59.26",
                  "product_id": "T051054"
                }
              },
              {
                "category": "product_version",
                "name": "Endpoint Configuration Toolset Solution Update 5 v1.59.26",
                "product": {
                  "name": "Tanium Endpoint Management Endpoint Configuration Toolset Solution Update 5 v1.59.26",
                  "product_id": "T051054-fixed",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:tanium:endpoint_management:endpoint_configuration_toolset_solution__update_5_v1.59.26"
                  }
                }
              },
              {
                "category": "product_version_range",
                "name": "TanOS \u003cUpdate 5  v1.8.6.01503",
                "product": {
                  "name": "Tanium Endpoint Management TanOS \u003cUpdate 5  v1.8.6.01503",
                  "product_id": "T051057"
                }
              },
              {
                "category": "product_version",
                "name": "TanOS Update 5  v1.8.6.01503",
                "product": {
                  "name": "Tanium Endpoint Management TanOS Update 5  v1.8.6.01503",
                  "product_id": "T051057-fixed",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:tanium:endpoint_management:tanos__update_5__v1.8.6.01503"
                  }
                }
              },
              {
                "category": "product_version_range",
                "name": "TDS \u003cUpdate 5 TDS v4.1.257",
                "product": {
                  "name": "Tanium Endpoint Management TDS \u003cUpdate 5 TDS v4.1.257",
                  "product_id": "T051058"
                }
              },
              {
                "category": "product_version",
                "name": "TDS Update 5 TDS v4.1.257",
                "product": {
                  "name": "Tanium Endpoint Management TDS Update 5 TDS v4.1.257",
                  "product_id": "T051058-fixed",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:tanium:endpoint_management:tds__update_5_tds_v4.1.257"
                  }
                }
              }
            ],
            "category": "product_name",
            "name": "Endpoint Management"
          }
        ],
        "category": "vendor",
        "name": "Tanium"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2025-15467",
      "product_status": {
        "known_affected": [
          "T051052",
          "T051054",
          "T051053"
        ]
      },
      "release_date": "2026-02-19T23:00:00.000+00:00",
      "title": "CVE-2025-15467"
    },
    {
      "cve": "CVE-2026-1292",
      "product_status": {
        "known_affected": [
          "T051048",
          "T051047",
          "T051046"
        ]
      },
      "release_date": "2026-02-19T23:00:00.000+00:00",
      "title": "CVE-2026-1292"
    },
    {
      "cve": "CVE-2026-1344",
      "product_status": {
        "known_affected": [
          "T051037"
        ]
      },
      "release_date": "2026-02-19T23:00:00.000+00:00",
      "title": "CVE-2026-1344"
    },
    {
      "cve": "CVE-2026-2350",
      "product_status": {
        "known_affected": [
          "T051050",
          "T051049",
          "T051058"
        ]
      },
      "release_date": "2026-02-19T23:00:00.000+00:00",
      "title": "CVE-2026-2350"
    },
    {
      "cve": "CVE-2026-2408",
      "product_status": {
        "known_affected": [
          "T051041",
          "T051042"
        ]
      },
      "release_date": "2026-02-19T23:00:00.000+00:00",
      "title": "CVE-2026-2408"
    },
    {
      "cve": "CVE-2026-2435",
      "product_status": {
        "known_affected": [
          "T051040",
          "T051038",
          "T051039"
        ]
      },
      "release_date": "2026-02-19T23:00:00.000+00:00",
      "title": "CVE-2026-2435"
    },
    {
      "cve": "CVE-2026-2605",
      "product_status": {
        "known_affected": [
          "T051043",
          "T051044",
          "T051057"
        ]
      },
      "release_date": "2026-02-19T23:00:00.000+00:00",
      "title": "CVE-2026-2605"
    }
  ]
}


Log in or create an account to share your comment.




Tags
Taxonomy of the tags.





Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.

Sightings

Author Source Type Date Other

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or observed by the user.
  • Confirmed: The vulnerability has been validated from an analyst's perspective.
  • Published Proof of Concept: A public proof of concept is available for this vulnerability.
  • Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
  • Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
  • Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
  • Not confirmed: The user expressed doubt about the validity of the vulnerability.
  • Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.


Detection rules are retrieved from Rulezet.