CVE-2026-9207 HIGH

CVE-2026-9207: Tanium addressed an unauthorized code execution vulnerability in Connect.

Vendor Tanium
Product Connect
Weakness CWE-78
Published May 27, 2026
Last update May 27, 2026
View on NVD All CVEs

CVSS base score

8.8/10
Attack vector Network
Attack complexity Low
Privileges required Low
User interaction None
Confidentiality High
Integrity High

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

What the vulnerability does

01Description

Tanium addressed an unauthorized code execution vulnerability in Connect.

Key dates

02Disclosure timeline

May 27, 2026 CVE published
May 27, 2026 Record updated

Related vulnerabilities

04Related CVE

CVE-2026-2630 [R1] Stand-alone Security Patches Available for Tenable Security Center versions 6.5.1, 6.6.0 and 6.7.2: SC-202602.1 + SC-202602.2 CVE-2023-34214 Second Order Command-injection Vulnerability in the Certificate-generation Function CVE-2026-27113 Liquid Prompt arbitrary command injection via crafted Git branch names in gitstatusd backend CVE-2022-34883 OS Command Injection Vulnerability in RAID Manager Storage Replication Adapter CVE-2021-47747 meterN 1.2.3 Authenticated Remote Code Execution via Admin Scripts