---
id: "CVE-2026-108326"
kind: "vulnerability"
aliases: ["CVE-2026-108326"]
title: "Tanium Stream Client Extension accepts improperly validated certificates"
severity: "medium"
cvss: 6.5
epss: null
exploited: false
status: "open"
category: "vendor"
products: []
ecosystems: []
tags: ["stream-client-extension", "tanium", "vendor"]
not_affected_if: []
published_at: "2026-10-27T18:17:33+00:00"
first_seen_at: "2026-10-27T18:32:59+00:00"
updated_at: "2026-10-27T18:34:46+00:00"
sources: [{"source": "nvd", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-108326", "first_seen_at": "2026-10-27T18:32:59+00:00"}]
---

# Tanium Stream Client Extension accepts improperly validated certificates

Tanium's Stream Client Extension does not properly validate certificates in some connections. The sources do not say what an attacker can do with that, beyond the medium CVSS score of 6.5.

_Summary, check and fix written by a model from the sources; labelled as such._

## Timeline

- 2026-10-27T18:32:59+00:00 nvd https://nvd.nist.gov/vuln/detail/CVE-2026-108326

## From the sources

Tanium addressed an improper certificate validation vulnerability in Stream Client Extension.

---

_Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai_