CVE-2026-108308EUVD-2026-111239GHSA-H3J9-QQ4R-6842
Tanium addressed a SQL injection vulnerability in Patch.
- Published
- Last modified
- Where the record stands: published, rejected by its publisher, or superseded by another id.What do these mean? →
- published
- Whether CISA lists it in its Known Exploited Vulnerabilities catalog: proof that attackers are using it.What do these mean? →
- Not listed in CISA KEV
- Fix
- Fixed in 3.24.306, 3.28.325, 3.32.353
- Whether working attack code is public (Exploit-DB, Metasploit, Nuclei or GitHub). Public code makes attacks easier.What do these mean? →
- None on Exploit-DB, Metasploit or GitHub
Summary
Tanium Patch, a software patch management product, is affected by this vulnerability. A SQL injection flaw in it could allow an attacker to interfere with the product's database queries, potentially exposing or altering data.
Summarized by anthropic/claude-haiku-5.5. Verify details against the original sources.
Read the original description
Tanium addressed a SQL injection vulnerability in Patch.
Timeline
- CVE published
- First seen by cve.now
Affected versions
- Tanium Patch
From 3.24 · fixed in 3.24.306; From 3.28 · fixed in 3.28.325; From 3.32 · fixed in 3.32.353