CVE-2026-116662
HighCVSS 7.5Exploitation Probability (EPSS)
Low risk31th percentile - higher than 31% of all known CVEs
Summary
Tanium addressed a compression bomb vulnerability in Enforce. The flaw may lead to excessive resource consumption when processing crafted compressed data.
Risk Assessment
Exploitation may cause resource exhaustion and denial of service of the Enforce service. This could disrupt security operations that depend on the platform.
Recommendation
Apply the update provided by Tanium for the Enforce module. Verify the version and deploy the fix according to vendor guidance.
Other vulnerabilities in Tanium Enforce
See all- CVE-2026-116660Medium
Tanium addressed an improper access controls vulnerability in Enforce.
- CVE-2026-116659Medium
Tanium addressed an uncontrolled resource consumption vulnerability in Enforce.
- CVE-2026-116658Medium
Tanium addressed a denial of service vulnerability in Enforce.
- CVE-2026-116657Medium
Tanium addressed a denial of service vulnerability in Enforce.
- CVE-2026-116656High
Tanium addressed an uncontrolled resource consumption vulnerability in Enforce. The flaw may allow resource exhaustion through crafted requests or data.
- CVE-2026-116649High
Tanium addressed an improper output sanitization vulnerability in Enforce. Inadequate output sanitization may allow content injection or unsafe rendering of data.
- CVE-2026-87088High
Tanium addressed an unauthorized code execution vulnerability in Enforce.
- CVE-2026-87084High
Tanium addressed a server-side request forgery vulnerability in Enforce.
Original NVD description (English source)
Tanium addressed a compression bomb vulnerability in Enforce.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS