Tanium: Seven Vulnerabilities Including SQLi Disclosed Together on 2026-09-16
Tanium addresses seven vulnerabilities, including three high-severity SQL injection flaws, across its enterprise security and management platform.
Key findings
- Seven vulnerabilities disclosed on 2026-09-16 affecting Tanium platform modules.
- Three high-severity SQL injection vulnerabilities found in Asset and Threat Response modules.
- Includes SSRF, improper access controls, and information disclosure flaws.
- Tanium has released patches; prompt updates are recommended for affected systems.
On September 16, 2026, Tanium disclosed seven vulnerabilities affecting its enterprise security and systems management platform. The vulnerabilities, spanning multiple modules including Threat Response, Discover, and Asset, were all published on the same day, indicating a coordinated disclosure event. The most severe of these flaws include three high-severity SQL injection vulnerabilities, two in the Asset module (CVE-2026-87024, CVE-2026-86865) and one in Threat Response (CVE-2026-87105).
The vulnerabilities detailed in this batch include:
SQL Injection Vulnerabilities
- **CVE-2026-87105**: A high-severity SQL injection vulnerability in the Threat Response module.
- **CVE-2026-87024**: A high-severity SQL injection vulnerability in the Asset module.
- **CVE-2026-86865**: Another high-severity SQL injection vulnerability in the Asset module.
Server-Side Request Forgery
- **CVE-2026-87116**: A medium-severity server-side request forgery (SSRF) vulnerability was found in Threat Response.
Improper Access Controls
- **CVE-2026-87113**: A medium-severity improper access controls vulnerability in Threat Response.
- **CVE-2026-87026**: A low-severity improper access controls vulnerability, also in Threat Response.
Information Disclosure
- **CVE-2026-87076**: A medium-severity information disclosure vulnerability in the Discover module.
The disclosure of these vulnerabilities highlights potential risks for organizations relying on Tanium for endpoint security and management. The presence of multiple SQL injection flaws, particularly in critical modules like Threat Response and Asset, warrants immediate attention from administrators. While specific exploitation details or threat actor information were not provided in the initial disclosures, the severity of the SQL injection vulnerabilities (CVSSv3 8.8 for CVE-2026-87105) suggests a significant potential impact if exploited.
Tanium has addressed these vulnerabilities through software updates. Customers are advised to consult the official Tanium advisories for specific version information and recommended patching procedures to mitigate these risks. Maintaining up-to-date systems is crucial for protecting against such security weaknesses.
This coordinated batch of vulnerabilities underscores the importance of prompt patching and security diligence for users of the Tanium platform. By addressing these issues, organizations can strengthen their security posture against potential attacks targeting their endpoint management infrastructure.