CVE-2026-116649
HighCVSS 7.1Exploitation Probability (EPSS)
Low risk10th percentile - higher than 10% of all known CVEs
Summary
Tanium addressed an improper output sanitization vulnerability in Enforce. Inadequate output sanitization may allow content injection or unsafe rendering of data.
Risk Assessment
Exploitation may lead to injection of malicious content or unintended actions in the user interface. This could compromise confidentiality or integrity of data in the Enforce module.
Recommendation
Apply the fix provided by Tanium for the Enforce module. Verify that all instances have been updated.
Other vulnerabilities in Tanium Enforce
See all- CVE-2026-116662High
Tanium addressed a compression bomb vulnerability in Enforce. The flaw may lead to excessive resource consumption when processing crafted compressed data.
- CVE-2026-116660Medium
Tanium addressed an improper access controls vulnerability in Enforce.
- CVE-2026-116659Medium
Tanium addressed an uncontrolled resource consumption vulnerability in Enforce.
- CVE-2026-116658Medium
Tanium addressed a denial of service vulnerability in Enforce.
- CVE-2026-116657Medium
Tanium addressed a denial of service vulnerability in Enforce.
- CVE-2026-116656High
Tanium addressed an uncontrolled resource consumption vulnerability in Enforce. The flaw may allow resource exhaustion through crafted requests or data.
- CVE-2026-87088High
Tanium addressed an unauthorized code execution vulnerability in Enforce.
- CVE-2026-87084High
Tanium addressed a server-side request forgery vulnerability in Enforce.
Original NVD description (English source)
Tanium addressed an improper output sanitization vulnerability in Enforce.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS