CVE-2026-108326
Endpoint Configuration Toolset Solution: Tanium addressed an improper certificate validation vulnerability in Stream Client Extension.
Tanium Endpoint Configuration Toolset Solution
CVSS
6.5MediumExploitationNo known exploitationNot in CISA KEV, which does not prove it is unexploitedCISA KEV
Exploit odds (EPSS)No scoreNo FIRST EPSS score in this snapshot yet
What fixes it
- 1.51.60Endpoint Configuration Toolset SolutionCVE List
- 1.59.50Endpoint Configuration Toolset SolutionCVE List
- 1.71.25Endpoint Configuration Toolset SolutionCVE List
- 2.4.1184cx-streamCVE List
- 2.7.1160cx-streamCVE List
- 2.8.1465cx-streamCVE List
Show all 7 fixed versions
- 2.9.561cx-streamCVE List
A fixed version on one release line is not the upgrade target for every line. Check your exact version and any vendor backports.
Description
Tanium addressed an improper certificate validation vulnerability in Stream Client Extension.
Text from CVE List
Affected versions 7
- Endpoint Configuration Toolset Solutionaffected: 1.51 before 1.51.60CVE List
- Endpoint Configuration Toolset Solutionaffected: 1.59 before 1.59.50CVE List
- Endpoint Configuration Toolset Solutionaffected: 1.71 before 1.71.25CVE List
- cx-streamaffected: 2.4.1184 before 2.4.1184CVE List
- cx-streamaffected: 2.7.1160 before 2.7.1160CVE List
- cx-streamaffected: 2.8.1465 before 2.8.1465CVE List
- cx-streamaffected: 2.9.561 before 2.9.561CVE List