CVE-2026-11925
CVE-2026-11925 is a low-severity vulnerability in Tanium Server with a CVSS 3.x base score of 2.7. It is not currently listed as actively exploited by CISA, and its EPSS exploit-prediction score is low. The underlying weakness is classified as CWE-451.
Key facts
- Severity: Low (CVSS 3.x base score 2.7)
- EPSS exploit prediction: 0% (8th percentile)
- Actively exploited: Not listed in CISA KEV
- Weakness: CWE-451
- Affected product: Tanium Server
- Published:
- Last modified:
Description
Tanium addressed a User Interface (UI) Misrepresentation of Critical Information vulnerability in Tanium Server.
Frequently asked questions
- What is CVE-2026-11925?
- Tanium addressed a User Interface (UI) Misrepresentation of Critical Information vulnerability in Tanium Server.
- How severe is CVE-2026-11925?
- CVE-2026-11925 has a CVSS 3.x base score of 2.7, rated low severity. It is exploitable over network with low attack complexity, requires high privileges and no user interaction. Impact on confidentiality is none, integrity low, and availability none.
- Is CVE-2026-11925 being actively exploited?
- It is not currently listed in CISA's KEV catalog. Its EPSS exploit-prediction score is 0% (8th percentile), an estimate of the probability of exploitation in the next 30 days.
- What products are affected by CVE-2026-11925?
- CVE-2026-11925 affects Tanium Server. See the affected-products list for the exact vulnerable versions.
- How do I fix CVE-2026-11925?
- Review the linked vendor and NVD advisories for patched versions and mitigations, then upgrade or apply the recommended workaround.
- When was CVE-2026-11925 published?
- CVE-2026-11925 was published on 2026-07-21 and last updated on 2026-08-18.
References
Affected products (1)
- cpe:2.3:a:tanium:server:*:*:*:*:*:*:*:*
More vulnerabilities in Tanium Server
- CVE-2026-15053 — High (CVSS 7.5): Tanium addressed a denial of service vulnerability in Tanium Server.
- CVE-2025-15316 — Medium (CVSS 6.7): Tanium addressed a local privilege escalation vulnerability in Tanium Server.
- CVE-2025-15315 — Medium (CVSS 6.7): Tanium addressed a local privilege escalation vulnerability in Tanium Module Server.
- CVE-2026-9156 — Medium (CVSS 6.5): Tanium addressed a denial of service vulnerability in Tanium Server.
- CVE-2025-15317 — Medium (CVSS 6.5): Tanium addressed an uncontrolled resource consumption vulnerability in Tanium Server.
- CVE-2025-15322 — Medium (CVSS 4.3): Tanium addressed an improper access controls vulnerability in Tanium Server.
All CVEs affecting Tanium Server →
Other CWE-451 vulnerabilities
- CVE-2026-2634 — Critical (CVSS 9.8): Malicious scripts could cause desynchronization between the address bar and web content before a response is received…
- CVE-2026-0907 — Critical (CVSS 9.8): Incorrect security UI in Split View in Google Chrome prior to 144.0.7559.59 allowed a remote attacker to perform UI…
- CVE-2026-0906 — Critical (CVSS 9.8): Incorrect security UI in Google Chrome on Android prior to 144.0.7559.59 allowed a remote attacker to spoof the…
- CVE-2025-8043 — Critical (CVSS 9.8): Focus incorrectly truncated URLs towards the beginning instead of around the origin. This vulnerability was fixed in…
- CVE-2026-11175 — High (CVSS 8.8): Incorrect security UI in Messages in Google Chrome on Android prior to 149.0.7827.53 allowed a remote attacker to…
- CVE-2026-11172 — High (CVSS 8.8): Incorrect security UI in Contact Picker in Google Chrome on Android prior to 149.0.7827.53 allowed a remote attacker to…