6.3Medium
CVE-2026-2435ASSET-7706
Description
Tanium addressed a SQL injection vulnerability in Asset.
Weakness (CWE):
CWE-89
Data: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Published as the sources state it, in English.
Affected products and versions
| Vendor | Product | Versions | |
|---|---|---|---|
| Tanium | Asset | 1.32 – < 1.32.179, 1.33 – < 1.33.269, 1.36 – < 1.36.108 | |
| tanium | service asset | 1.32.178 |
References and patches
- TAN-2026-004 Vendor Advisory
CPE matches (NVD) (3)
cpe:2.3:a:tanium:asset:*:*:*:*:*:*:*:*≥ 1.32 < 1.32.179cpe:2.3:a:tanium:asset:*:*:*:*:*:*:*:*≥ 1.33 < 1.33.269cpe:2.3:a:tanium:asset:*:*:*:*:*:*:*:*≥ 1.36 < 1.36.108