ByteOS Network

Vulnerability Details :

CVE-2026-0925

Summary

Assigner-Tanium

Assigner Org ID-3938794e-25f5-4123-a1ba-5cbd7f104512

Published At-26 Jan, 2026 | 17:51

Updated At-02 Feb, 2026 | 20:01

Tanium addressed an improper input validation vulnerability in Discover.

EPSS History

Score

Latest Score

N/A

Percentile

Latest Percentile

N/A

▼Common Vulnerabilities and Exposures (CVE)

cve.org

Assigner:Tanium

Assigner Org ID:3938794e-25f5-4123-a1ba-5cbd7f104512

Published At:26 Jan, 2026 | 17:51

Updated At:02 Feb, 2026 | 20:01

▼CVE Numbering Authority (CNA)

Tanium addressed an improper input validation vulnerability in Discover.

Affected Products

Vendor

Tanium

Product

Discover

CPEs

cpe:2.3:a:tanium:service_asset:4.10.133:*:*:*:*:*:*:*
cpe:2.3:a:tanium:service_asset:4.15.129:*:*:*:*:*:*:*

Versions

Affected

From 4.10 before 4.10.134 (custom)
From 4.15 before 4.15.130 (custom)

Problem Types

Type	CWE ID	Description
CWE	CWE-1284	Improper Validation of Specified Quantity in Input

Type: CWE

CWE ID: CWE-1284

Description: Improper Validation of Specified Quantity in Input

Metrics

Version	Base score	Base severity	Vector
3.1	2.7	LOW	CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:L

Version: 3.1

Base score: 2.7

Base severity: LOW

Vector:

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:L

References

Hyperlink	Resource
https://security.tanium.com/TAN-2026-002	N/A

Hyperlink: https://security.tanium.com/TAN-2026-002

Resource: N/A

▼Authorized Data Publishers (ADP)

CISA ADP Vulnrichment

Metrics Other Info

▼National Vulnerability Database (NVD)

nvd.nist.gov

Source:3938794e-25f5-4123-a1ba-5cbd7f104512

Published At:26 Jan, 2026 | 18:16

Updated At:09 Mar, 2026 | 18:10

Tanium addressed an improper input validation vulnerability in Discover.

Date Added	Due Date	Vulnerability Name	Required Action
	N/A

Metrics

Type	Version	Base score	Base severity	Vector
Secondary	3.1	2.7	LOW	CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:L
Primary	3.1	4.9	MEDIUM	CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H

Type: Secondary

Version: 3.1

Base score: 2.7

Base severity: LOW

Vector:

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:L

Type: Primary

Version: 3.1

Base score: 4.9

Base severity: MEDIUM

Vector:

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H

CPE Matches

tanium>>discover>>Versions from 4.10(inclusive) to 4.10.134(exclusive)

cpe:2.3:a:tanium:discover:*:*:*:*:*:*:*:*

tanium>>discover>>Versions from 4.15(inclusive) to 4.15.130(exclusive)

cpe:2.3:a:tanium:discover:*:*:*:*:*:*:*:*

Weaknesses

CWE ID	Type	Source
CWE-1284	Secondary	3938794e-25f5-4123-a1ba-5cbd7f104512

CWE ID: CWE-1284

Type: Secondary

Source: 3938794e-25f5-4123-a1ba-5cbd7f104512

References

Hyperlink	Source	Resource
https://security.tanium.com/TAN-2026-002	3938794e-25f5-4123-a1ba-5cbd7f104512	Vendor Advisory

Hyperlink: https://security.tanium.com/TAN-2026-002

Source: 3938794e-25f5-4123-a1ba-5cbd7f104512

Resource:

Vendor Advisory

Similar CVEs

4Records found

CVE-2026-6416

Matching Score-8

Assigner-3938794e-25f5-4123-a1ba-5cbd7f104512

View Details

Matching Score-8

Assigner-3938794e-25f5-4123-a1ba-5cbd7f104512

CVSS Score-2.7||LOW

EPSS-0.05% / 15.77%

7 Day CHG~0.00%

Published-22 Apr, 2026 | 01:46

Updated-06 May, 2026 | 18:38

Tanium addressed an uncontrolled resource consumption vulnerability in Interact.

Vendor-tanium Tanium

Product-interact Interact

CWE ID-CWE-400

Uncontrolled Resource Consumption

CVE-2026-1224

Matching Score-8

Assigner-3938794e-25f5-4123-a1ba-5cbd7f104512

View Details

Matching Score-8

Assigner-3938794e-25f5-4123-a1ba-5cbd7f104512

CVSS Score-4.9||MEDIUM

EPSS-0.02% / 5.25%

7 Day CHG~0.00%

Published-26 Jan, 2026 | 17:36

Updated-09 Mar, 2026 | 18:09

Tanium addressed an uncontrolled resource consumption vulnerability in Discover.

Vendor-tanium Tanium

Product-discover Discover

CWE ID-CWE-770

Allocation of Resources Without Limits or Throttling

CVE-2023-23549

Matching Score-4

Assigner-Checkmk GmbH

View Details

Matching Score-4

Assigner-Checkmk GmbH

CVSS Score-2.7||LOW

EPSS-0.05% / 16.54%

7 Day CHG~0.00%

Published-15 Nov, 2023 | 11:07

Updated-28 Aug, 2024 | 20:25

DoS via long hostnames

Improper Input Validation in Checkmk <2.2.0p15, <2.1.0p37, <=2.0.0p39 allows priviledged attackers to cause partial denial of service of the UI via too long hostnames.

Vendor-Checkmk GmbH

Product-checkmk Checkmk

CWE ID-CWE-1284

Improper Validation of Specified Quantity in Input

CVE-2021-44693

Matching Score-4

Assigner-Siemens

View Details

Matching Score-4

Assigner-Siemens

CVSS Score-4.9||MEDIUM

EPSS-0.19% / 40.80%

7 Day CHG~0.00%

Published-13 Dec, 2022 | 00:00

Updated-21 Apr, 2025 | 13:45

Affected devices don't process correctly certain special crafted packets sent to port 102/tcp, which could allow an attacker to cause a denial of service in the device.

Vendor-Siemens AG

CWE ID-CWE-1284

Improper Validation of Specified Quantity in Input

CVE-2026-0925

Credits

Tanium addressed an improper input validation vulnerability in Discover.

Vendors

Products

Metrics (CVSS)

Weaknesses

Attack Patterns

Solution/Workaround

References

EPSS History

Score

Latest Score

N/A

Percentile

Latest Percentile

N/A

Stakeholder-Specific Vulnerability Categorization (SSVC)

Affected Products

Affected

Problem Types

Metrics

Metrics Other Info

Impacts

Solutions

Configurations

Workarounds

Exploits

Credits

Timeline

Replaced By

Rejected Reason

References

Affected Products

Metrics

Metrics Other Info

Impacts

Solutions

Configurations

Workarounds

Exploits

Credits

Timeline

Replaced By

Rejected Reason

References

CISA Catalog

Metrics

CPE Matches

Weaknesses

Evaluator Description

Evaluator Impact

Evaluator Solution

Vendor Statements

References

Change History

Similar CVEs