Live › vulnerability › CVE-2026-108303
Go to dashboardTanium has fixed a flaw in its Certificate Manager that allows unauthorized code execution. The sources do not say which versions are affected or what an attacker needs to reach it.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-27 18:32 UTC. All times on this page are UTC.
Tanium Certificate Manager customers, on-prem and Tanium Cloud. The NVD CVSS vector (network, low privileges required, no user interaction) suggests an authenticated Tanium user could run code, but the advisory was not read, so required permission and affected versions are unknown. Tanium Cloud customers appear to have received the fix through the Oct 13/16 releases, per release notes (not confirmed for this CVE). Teams without Tanium Certificate Manager can skip it.
| Product | Ecosystem | Affected | Fixed in |
|---|---|---|---|
| Tanium Certificate Manager | vendor | unknown | – |
Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
Tanium addressed an unauthorized code execution vulnerability in Certificate Manager.
This page as .md · .json · in your agent: get_signal("CVE-2026-108303")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.