{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-6392", "assignerOrgId": "3938794e-25f5-4123-a1ba-5cbd7f104512", "state": "PUBLISHED", "assignerShortName": "Tanium", "dateReserved": "2026-04-15T20:04:30.751Z", "datePublished": "2026-04-22T01:46:29.651Z", "dateUpdated": "2026-04-22T01:46:29.651Z"}, "containers": {"cna": {"affected": [{"product": "Threat Response", "vendor": "Tanium", "versions": [{"version": "4.6.0", "status": "affected", "lessThan": "4.6.577", "versionType": "custom"}, {"version": "4.9.0", "status": "affected", "lessThan": "4.9.379", "versionType": "custom"}]}], "dateAssigned": "2026-04-15T20:04:30.169Z", "datePublic": "2026-04-22T01:46:13.287Z", "descriptions": [{"lang": "en", "value": "Tanium addressed an information disclosure vulnerability in Threat Response."}], "metrics": [{"cvssV3_1": {"version": "3.1", "baseScore": 2.7, "baseSeverity": "LOW", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N"}}], "problemTypes": [{"descriptions": [{"cweId": "CWE-200", "description": "Exposure of Sensitive Information to an Unauthorized Actor", "lang": "en", "type": "CWE"}]}], "providerMetadata": {"orgId": "3938794e-25f5-4123-a1ba-5cbd7f104512", "shortName": "Tanium", "dateUpdated": "2026-04-22T01:46:29.651Z"}, "references": [{"name": "TAN-2026-011", "url": "https://security.tanium.com/TAN-2026-011"}], "title": "Tanium addressed an information disclosure vulnerability in Threat Response."}}}

{}

{"cveTags": [], "descriptions": [{"lang": "en", "value": "Tanium addressed an information disclosure vulnerability in Threat Response."}], "id": "CVE-2026-6392", "lastModified": "2026-04-22T03:16:01.420", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 2.7, "baseSeverity": "LOW", "confidentialityImpact": "LOW", "integrityImpact": "NONE", "privilegesRequired": "HIGH", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N", "version": "3.1"}, "exploitabilityScore": 1.2, "impactScore": 1.4, "source": "3938794e-25f5-4123-a1ba-5cbd7f104512", "type": "Secondary"}]}, "published": "2026-04-22T03:16:01.420", "references": [{"source": "3938794e-25f5-4123-a1ba-5cbd7f104512", "url": "https://security.tanium.com/TAN-2026-011"}], "sourceIdentifier": "3938794e-25f5-4123-a1ba-5cbd7f104512", "vulnStatus": "Received", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-200"}], "source": "3938794e-25f5-4123-a1ba-5cbd7f104512", "type": "Secondary"}]}

{}

{"affected": [{"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "[4.6.0,4.6.577)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "[4.9.0,4.9.379)"}}], "enrichment": {"confidence": 100.0, "confidence_source": "matching", "scores": [{"score": 100.0, "source": "matching"}]}, "original": {"product": "Threat Response", "source": "cna", "vendor": "Tanium"}, "product": "threat_response", "vendor": "tanium"}], "analysis": {"en": {"generated_at": "2026-04-22T04:21:46.080892+00:00", "value": {"mitigation_remediation": ["Review and apply the latest Tanium Threat Response updates or patches once available.", "Limit access to Threat Response components to strictly authorized users and enforce least privilege policies.", "Continuously monitor and audit Threat Response logs for anomalies or unauthorized data access attempts."], "summary": {"action": "Patch", "impact": "Information Disclosure"}, "threat_synthesis": {"affected_systems": "Tanium Threat Response is affected. Version information is not specified in the advisory.", "description_and_impact": "The vulnerability in Tanium Threat Response permits an attacker to inadvertently read sensitive system information, exposing confidential data without changing the system state. The weakness maps to unchecked access controls that allow data leakage; it is categorized as CWE\u2011200 and does not grant the attacker further system control or executable privileges.", "risk_and_exploitability": "The CVSS score of 2.7 reflects a low\u2011severity risk. EPSS data is not available, and the vulnerability is not listed in the CISA KEV catalog, suggesting the exploit probability is low. The attack vector is not detailed in the advisory, so the exact conditions for exploitation cannot be confirmed, but the impact is limited to confidentiality exposure."}}}}, "created": "2026-04-22T03:30:06.536438+00:00", "updated": "2026-04-22T04:30:05.298200+00:00", "vendors": ["tanium", "tanium$PRODUCT$threat_response"]}