---
id: "CVE-2026-116648"
kind: "vulnerability"
aliases: ["CVE-2026-116648"]
title: "Tanium Discover: improper output sanitization flaw, details unknown"
severity: "medium"
cvss: 4.1
epss: null
exploited: false
status: "open"
category: "vendor"
products: []
ecosystems: []
tags: ["tanium", "tanium-discover", "vendor"]
not_affected_if: []
published_at: "2026-11-03T23:17:30+00:00"
first_seen_at: "2026-11-03T23:45:13+00:00"
updated_at: "2026-11-03T23:45:57+00:00"
sources: [{"source": "nvd", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-116648", "first_seen_at": "2026-11-03T23:45:13+00:00"}]
---

# Tanium Discover: improper output sanitization flaw, details unknown

Tanium fixed an output sanitization flaw in its Discover product, according to NVD. The sources do not say what an attacker can do with it.

_Summary, check and fix written by a model from the sources; labelled as such._

## Timeline

- 2026-11-03T23:45:13+00:00 nvd https://nvd.nist.gov/vuln/detail/CVE-2026-116648

## From the sources

Tanium addressed an improper output sanitization vulnerability in Discover.

---

_Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai_