Several Tanium products affected by vulnerabilities (AV26-1097)
Original title: Tanium security advisory (AV26-1097)
Affected lines include Certificate Manager, Endpoint Configuration, Enforce, Provision, and Threat Response builds listed as prior versions.
As of October 27, 2026, Tanium reported vulnerabilities in Certificate Manager, Endpoint Configuration Toolset Solution, Enforce, Provision, Threat Response, end-user-cx, and index-cx. The Canadian Centre for Cyber Security advisory AV26-1097, dated October 28, 2026, lists affected builds as versions prior to named releases, or as multiple versions. It urges administrators to review Tanium's advisory and apply updates as they become available. No CVE identifiers or exploitation status are included.
Unconfirmed: The advisory does not describe impact, CVE identifiers, or whether the flaws are exploited.
- Certificate Manager builds prior to 1.17.417, 1.18.368, and 1.22.119 are listed.
- Enforce builds prior to 2.10.778, 2.9.736, and 3.0.373 are listed.
- Threat Response builds prior to 4.12.349, 4.17.327, and 4.9.476 are listed.
- end-user-cx and index-cx are listed only as multiple versions.
| Product | Affected |
|---|---|
| Tanium Certificate Manager | Prior to 1.17.417; prior to 1.18.368; prior to 1.22.119 |
| Tanium Endpoint Configuration Toolset Solution | Prior to 1.51.60; prior to 1.59.50; prior to 1.71.25 |
| Tanium Enforce | Prior to 2.10.778; prior to 2.9.736; prior to 3.0.373 |
| Tanium Provision | Prior to 1.17.150; prior to 1.23.161; prior to 1.24.199 |
| Tanium Threat Response | Prior to 4.12.349; prior to 4.17.327; prior to 4.9.476 |
| Tanium end-user-cx | Multiple versions |
| Tanium index-cx | Multiple versions |
- 1.Review the Tanium security advisory and apply updates as they become available.
From the original article
1 min read at cyber.gc.ca
Serial number: AV26-1097 Date: October 28, 2026 As of October 27, 2026, Tanium is affected by vulnerabilities in the following products: Certificate Manager Prior to 1. 17. 417 Prior to 1.
cyber.gc.ca
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.