CVE-2026-12139 :: Enginsight Vulnerability Database

Provider	Type	Base Score	Atk. Vector	Atk. Complexity	Priv. Required	Vector
NIST	Primary	4.4 MEDIUM	LOCAL	LOW	HIGH	CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N

Base Score

CVSS 3.x

EPSS Score

Percentile: 1.34%

Affected Products (NVD)

Vendor	Product	Version
tanium	connect	5.29.0 ≤ 𝑥 < 5.29.251
tanium	connect	5.37.0 ≤ 𝑥 < 5.37.156
tanium	connect	5.47.0 ≤ 𝑥 < 5.47.112

𝑥

= Vulnerable software versions

Common Weakness Enumeration

CWE-214 - Invocation of Process Using Visible Sensitive Information
A process is invoked with sensitive command-line arguments, environment variables, or other elements that can be seen by other processes on the operating system.

References

https://security.tanium.com/TAN-2026-018