CVE-2026-116656
HighCVSS 7.5Exploitation Probability (EPSS)
Low risk31th percentile - higher than 31% of all known CVEs
Summary
Tanium addressed an uncontrolled resource consumption vulnerability in Enforce. The flaw may allow resource exhaustion through crafted requests or data.
Risk Assessment
An attacker may cause resource exhaustion and denial of service of the Enforce service. This could affect continuity of security operations in the organization.
Recommendation
Deploy the update released by Tanium for the Enforce module. Monitor resource consumption until the fix is fully rolled out.
Other vulnerabilities in Tanium Enforce
See all- CVE-2026-116662High
Tanium addressed a compression bomb vulnerability in Enforce. The flaw may lead to excessive resource consumption when processing crafted compressed data.
- CVE-2026-116660Medium
Tanium addressed an improper access controls vulnerability in Enforce.
- CVE-2026-116659Medium
Tanium addressed an uncontrolled resource consumption vulnerability in Enforce.
- CVE-2026-116658Medium
Tanium addressed a denial of service vulnerability in Enforce.
- CVE-2026-116657Medium
Tanium addressed a denial of service vulnerability in Enforce.
- CVE-2026-116649High
Tanium addressed an improper output sanitization vulnerability in Enforce. Inadequate output sanitization may allow content injection or unsafe rendering of data.
- CVE-2026-87088High
Tanium addressed an unauthorized code execution vulnerability in Enforce.
- CVE-2026-87084High
Tanium addressed a server-side request forgery vulnerability in Enforce.
Original NVD description (English source)
Tanium addressed an uncontrolled resource consumption vulnerability in Enforce.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS