{"id":"CVE-2026-108303","kind":"vulnerability","aliases":["CVE-2026-108303"],"related":[],"title":"Tanium Certificate Manager: unauthorized code execution flaw patched","description":"Tanium addressed an unauthorized code execution vulnerability in Certificate Manager.","summary":"Tanium has fixed a flaw in its Certificate Manager that allows unauthorized code execution. The sources do not say which versions are affected or what an attacker needs to reach it.","severity":"high","cvss":8.8,"epss":null,"exploited":false,"exploited_at":null,"products":[{"name":"Tanium Certificate Manager","fixed":[],"affected":"unknown","ecosystem":"vendor"}],"ecosystems":[],"tags":["certificate-manager","self-hosted","tanium","vendor"],"not_affected_if":[],"how_to_check":"Unknown. Compare your installed Certificate Manager version in the Tanium Console (Administration > Solutions) with the fixed version in Tanium's advisory at security.tanium.com or the Tanium Resource Center, which is not yet found.","fix":"- Apply the Tanium Certificate Manager update Tanium published for this issue; the sources do not name the fixed version.","status":"open","published_at":"2026-10-27T18:17:31+00:00","first_seen_at":"2026-10-27T18:32:58+00:00","triaged_at":"2026-10-27T18:34:24+00:00","updated_at":"2026-10-27T18:38:52+00:00","category":"vendor","confidence":0.4,"triage":{"at":"2026-10-27T18:34:24Z","model":"claude-haiku-5-5","output":{"fix":"- Apply the Tanium Certificate Manager update Tanium published for this issue; the sources do not name the fixed version.","reach":"unknown","title":"Tanium Certificate Manager: unauthorized code execution flaw patched","impact":"high","summary":"Tanium has fixed a flaw in its Certificate Manager that allows unauthorized code execution. The sources do not say which versions are affected or what an attacker needs to reach it.","category":"vendor","nicknames":[],"who_cares":["tanium","certificate-manager"],"confidence":0.4,"needs_auth":"unknown","worst_case":"Attacker runs code on the affected Tanium host","analyst_note":"Find the Tanium advisory for CVE-2026-108303 to get affected and fixed versions, required access and default configuration.","how_to_check":"unknown","needs_analyst":true,"not_affected_if":[],"who_is_affected":"unknown","user_interaction":"unknown","needs_special_setup":"unknown","severity_if_unknown":"high"},"cost_usd":0.000503,"input_tokens":3238,"output_tokens":358,"severity_before":"high"},"analyst_status":"done","analyst_note":"Find the Tanium advisory for CVE-2026-108303 to get affected and fixed versions, required access and default configuration.","search":"'-108303':11A,14A '-2026':10A,13A 'address':57C 'affect':48B 'allow':36B 'attack':52B 'certif':2A,19B,33B,64C 'certificate':16A 'certificate-manag':18B 'code':5A,38B,60C 'cve':9A,12A 'execut':6A,39B,61C 'fix':28B 'flaw':7A,30B 'host':23B 'manag':3A,20B,34B,65C 'manager':17A 'need':53B 'patch':8A 'reach':55B 'say':44B 'self':22B 'self-host':21B 'sourc':41B 'tanium':1A,15A,24B,26B,56C 'unauthor':4A,37B,59C 'vendor':25B 'version':46B 'vulner':62C","nicknames":[],"mitigations":[],"who_affected":"Tanium Certificate Manager customers, on-prem and Tanium Cloud. The NVD CVSS vector (network, low privileges required, no user interaction) suggests an authenticated Tanium user could run code, but the advisory was not read, so required permission and affected versions are unknown. Tanium Cloud customers appear to have received the fix through the Oct 13/16 releases, per release notes (not confirmed for this CVE). Teams without Tanium Certificate Manager can skip it.","tier":"B","verified":{},"analyst_revisit_at":null,"first_public_at":"2026-10-27T18:17:31+00:00","kev":null,"cvss_vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss_by":"3938794e-25f5-4123-a1ba-5cbd7f104512","poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-108303","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-108303","severity":null,"published_at":"2026-10-27T18:17:31+00:00","modified_at":"2026-10-27T18:17:31+00:00","first_seen_at":"2026-10-27T18:32:58+00:00","fetched_at":"2026-10-27T18:32:58+00:00","note":null},{"source":"analyst","external_id":"CVE-2026-108303:918","url":null,"severity":null,"published_at":"2026-10-27T18:38:52+00:00","modified_at":"2026-10-27T18:38:52+00:00","first_seen_at":"2026-10-27T18:38:52+00:00","fetched_at":"2026-10-27T18:38:52+00:00","note":"Tanium's per-CVE advisory (security.tanium.com TAN-2026-xxx) not found by search; index page shows only dates. Sibling Tanium advisories (Connect, Comply) describe authenticated-user code execution, with CVSS vector matching this one (PR:L), but that is not confirmed for Certificate Manager. Cloud release notes (Oct 13 and Oct 16, 2026) mention a security update, no versions. Nothing marked verified."}],"documents":[{"id":7390,"url":"https://kb.tanium.com/Tanium_Cloud_Release_Notes_Certificate_Manager","title":"Tanium Cloud Release Notes Certificate Manager","kind":"vendor","source":"analyst","text":"Release Oct 16, 2026 and Oct 13, 2026 list a Security Update: 'This release includes security updates. Details of the issue, including affected versions, and mitigation information, can be obtained within Tanium Resource Center or by contacting support.' No CVE id or versions given.","published_at":null,"relation":"mentions","confidence":null,"note":null}],"notice":"Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai"}