All vulnerabilities
CVE-2026-108307

Endpoint Configuration Toolset Solution: Tanium addressed a heap-based buffer overflow vulnerability in Index.

Tanium Endpoint Configuration Toolset Solution
Open in ThreatlineRecord JSON
CVSS
7.8High
ExploitationNo known exploitationNot in CISA KEV, which does not prove it is unexploitedCISA KEV
Exploit odds (EPSS)No scoreNo FIRST EPSS score in this snapshot yet
Fixed in1.51.60Also 1.59.50, 1.71.25 and 6 moreCVE List
Published27 Oct 2026Updated 27 Oct 2026CVE List

What fixes it

Show all 9 fixed versions

A fixed version on one release line is not the upgrade target for every line. Check your exact version and any vendor backports.

Description

Tanium addressed a heap-based buffer overflow vulnerability in Index.

Text from CVE List

Affected versions 9

  • Endpoint Configuration Toolset Solutionaffected: 1.51 before 1.51.60CVE List
  • Endpoint Configuration Toolset Solutionaffected: 1.59 before 1.59.50CVE List
  • Endpoint Configuration Toolset Solutionaffected: 1.71 before 1.71.25CVE List
  • index-cxaffected: 3.9.520 before 3.9.520CVE List
  • index-cxaffected: 3.11.443 before 3.11.443CVE List
  • index-cxaffected: 3.14.921 before 3.14.921CVE List
  • index-cxaffected: 3.14.917 before 3.14.917CVE List
  • index-cxaffected: 3.15.2420 before 3.15.2420CVE List
  • index-cxaffected: 3.16.984 before 3.16.984CVE List

References 1