CVE-2026-6408

CVE-2026-6408 is an information disclosure vulnerability affecting Tanium Server that was addressed by the vendor. The vulnerability allows disclosure of sensitive information through the network without requiring user interaction. The attack requires high-level privileges to exploit, resulting in a low overall severity rating with a CVSS score of 2.7 and minimal confidentiality impact. There is no evidence of active exploitation, and the vulnerability has not been added to the Known Exploited Vulnerabilities catalog. The vulnerability maintains low community attention with an EPSS score of 0.00023, indicating it is among the lowest-risk CVEs by probability of exploitation, and remains inactive on any public hot vulnerability lists.