CVE-2026-108303
Full vulnerability record from the local CVENow database.
Description
Tanium addressed an unauthorized code execution vulnerability in Certificate Manager.
Severity
HIGH
CVSS score
8.8
(v3.1)
Vulnerability status
Awaiting Analysis
Source identifier
3938794e-25f5-4123-a1ba-5cbd7f104512
Published
2026-10-27 18:17:31.777000
Last modified
2026-10-28 14:15:58.863000
View original CVE JSON
{
"id": "CVE-2026-108303",
"sourceIdentifier": "3938794e-25f5-4123-a1ba-5cbd7f104512",
"published": "2026-10-27T18:17:31.777",
"lastModified": "2026-10-28T14:15:58.863",
"vulnStatus": "Awaiting Analysis",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "Tanium addressed an unauthorized code execution vulnerability in Certificate Manager."
}
],
"affected": [
{
"source": "3938794e-25f5-4123-a1ba-5cbd7f104512",
"affectedData": [
{
"vendor": "Tanium",
"product": "Certificate Manager",
"versions": [
{
"version": "1.17",
"lessThan": "1.17.417",
"versionType": "custom",
"status": "affected"
},
{
"version": "1.18",
"lessThan": "1.18.368",
"versionType": "custom",
"status": "affected"
},
{
"version": "1.22",
"lessThan": "1.22.119",
"versionType": "custom",
"status": "affected"
}
]
}
]
}
],
"metrics": {
"cvssMetricV31": [
{
"source": "3938794e-25f5-4123-a1ba-5cbd7f104512",
"type": "Secondary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "LOW",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"availabilityImpact": "HIGH"
},
"exploitabilityScore": 2.8,
"impactScore": 5.9
}
]
},
"weaknesses": [
{
"source": "3938794e-25f5-4123-a1ba-5cbd7f104512",
"type": "Secondary",
"description": [
{
"lang": "en",
"value": "CWE-77"
}
]
}
],
"references": [
{
"url": "https://security.tanium.com/TAN-2026-075",
"source": "3938794e-25f5-4123-a1ba-5cbd7f104512"
}
]
}