{"id":"CVE-2026-116667","kind":"vulnerability","aliases":["CVE-2026-116667"],"related":[],"title":"Tanium Discover: improper access controls flaw, impact details unpublished","description":"Tanium addressed an improper access controls vulnerability in Discover.","summary":"Tanium has fixed an improper access controls flaw in its Discover product, according to the NVD entry. The sources do not say what an attacker can read or change once the flaw is used.","severity":"medium","cvss":4.2,"epss":null,"exploited":false,"exploited_at":null,"products":[],"ecosystems":[],"tags":["self-hosted","tanium","tanium-discover","vendor"],"not_affected_if":[],"how_to_check":null,"fix":null,"status":"open","published_at":"2026-11-03T23:17:32+00:00","first_seen_at":"2026-11-03T23:45:14+00:00","triaged_at":"2026-11-03T23:45:56+00:00","updated_at":"2026-11-03T23:45:56+00:00","category":"vendor","confidence":0.3,"triage":{"at":"2026-11-03T23:45:56Z","model":"claude-haiku-5-5","output":{"fix":"unknown","reach":"unknown","title":"Tanium Discover: improper access controls flaw, impact details unpublished","impact":"medium","summary":"Tanium has fixed an improper access controls flaw in its Discover product, according to the NVD entry. The sources do not say what an attacker can read or change once the flaw is used.","audience":"businesses","category":"vendor","nicknames":[],"who_cares":["tanium","tanium-discover","self-hosted"],"confidence":0.3,"fix_status":"unknown","needs_auth":"unknown","worst_case":"unknown","analyst_note":"Check the Tanium security advisory for affected and fixed Discover versions, and the access control detail, via the NVD link https://nvd.nist.gov/vuln/detail/CVE-2026-116667.","how_to_check":"- unknown","plain_action":"","needs_analyst":true,"not_affected_if":[],"who_is_affected":"Organizations that run Tanium Discover. The sources do not say which versions are affected or what access control is bypassed, so the exposure cannot be confirmed from them.","user_interaction":"unknown","needs_special_setup":"unknown","severity_if_unknown":"medium"},"cost_usd":0.000611,"input_tokens":4033,"output_tokens":415,"severity_before":"medium"},"analyst_status":null,"analyst_note":null,"search":"'-116667':12A,15A '-2026':11A,14A 'access':4A,29B,62C 'accord':36B 'address':59C 'attack':48B 'chang':52B 'control':5A,30B,63C 'cve':10A,13A 'detail':8A 'discov':2A,22B,34B,66C 'entri':40B 'fix':26B 'flaw':6A,31B,55B 'host':18B 'impact':7A 'improp':3A,28B,61C 'nvd':39B 'product':35B 'read':50B 'say':45B 'self':17B 'self-host':16B 'sourc':42B 'tanium':1A,19B,21B,24B,58C 'tanium-discov':20B 'unpublish':9A 'use':57B 'vendor':23B 'vulner':64C","nicknames":[],"mitigations":[],"who_affected":"Organizations that run Tanium Discover. The sources do not say which versions are affected or what access control is bypassed, so the exposure cannot be confirmed from them.","tier":"C","verified":{},"analyst_revisit_at":null,"fix_status":"none","audience":"businesses","plain_action":null,"pkeys":[],"ptokens":[],"labels":["medium","selfhosted","tanium","taniumdiscover","vendor"],"campaign_type":null,"first_public_at":"2026-11-03T23:17:32+00:00","kev":null,"cvss_vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:N","cvss_by":"3938794e-25f5-4123-a1ba-5cbd7f104512","poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-116667","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-116667","severity":null,"published_at":"2026-11-03T23:17:32+00:00","modified_at":"2026-11-03T23:17:32+00:00","first_seen_at":"2026-11-03T23:45:14+00:00","fetched_at":"2026-11-03T23:45:14+00:00","note":null}],"documents":[],"notice":"Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai"}