All vulnerabilities
CVE-2026-108305

Endpoint Configuration Toolset Solution: Tanium addressed a local privilege escalation vulnerability in End-User Notifications.

Tanium Endpoint Configuration Toolset Solution
Open in ThreatlineRecord JSON
CVSS
7.8High
ExploitationNo known exploitationNot in CISA KEV, which does not prove it is unexploitedCISA KEV
Exploit odds (EPSS)No scoreNo FIRST EPSS score in this snapshot yet
Fixed in1.51.60Also 1.59.50, 1.71.25 and 7 moreCVE List
Published27 Oct 2026Updated 27 Oct 2026CVE List

What fixes it

  • 1.51.60Endpoint Configuration Toolset SolutionCVE List
  • 1.59.50Endpoint Configuration Toolset SolutionCVE List
  • 1.71.25Endpoint Configuration Toolset SolutionCVE List
  • 1.8.47end-user-cxCVE List
  • 1.11.605end-user-cxCVE List
  • 1.19.325end-user-cxCVE List
Show all 10 fixed versions

A fixed version on one release line is not the upgrade target for every line. Check your exact version and any vendor backports.

Description

Tanium addressed a local privilege escalation vulnerability in End-User Notifications.

Text from CVE List

Affected versions 10

  • Endpoint Configuration Toolset Solutionaffected: 1.51 before 1.51.60CVE List
  • Endpoint Configuration Toolset Solutionaffected: 1.59 before 1.59.50CVE List
  • Endpoint Configuration Toolset Solutionaffected: 1.71 before 1.71.25CVE List
  • end-user-cxaffected: 1.8.47 before 1.8.47CVE List
  • end-user-cxaffected: 1.11.605 before 1.11.605CVE List
  • end-user-cxaffected: 1.19.325 before 1.19.325CVE List
  • end-user-cxaffected: 1.21.835 before 1.21.835CVE List
  • end-user-cxaffected: 1.22.1199 before 1.22.1199CVE List
  • end-user-cxaffected: 1.23.766 before 1.23.766CVE List
  • end-user-cxaffected: 1.24.590 before 1.24.590CVE List

References 1