Description
Tanium addressed an uncontrolled resource consumption vulnerability in Enforce.
Published: 2026-10-27
Score: 4.3 Medium
EPSS: n/a
KEV: No
Impact: Denial of Service (Resource Exhaustion)
Action: Apply Patch
AI Analysis

Impact

The vulnerability allows an attacker to trigger uncontrolled consumption of system resources within Tanium Enforce, leading to degraded performance or a denial of service. This flaw is classified as a resource exhaustion weakness under CWE-770, meaning the software fails to limit or regulate the amount of resources it consumes.

Affected Systems

The vulnerability affects Tanium Enforce. No specific affected version information is provided in the advisory.

Risk and Exploitability

The CVSS score of 4.3 indicates a medium severity vulnerability that could lead to a denial of service if exploited. EPSS data is not available, and the issue is not listed in CISA’s KEV, suggesting no widespread exploitation has been reported. Without explicit documentation of attack vectors, the exact method of exploitation remains unknown; however, the vulnerability could be triggered by malicious or erroneous operations within Enforce that allow excessive resource usage.

Generated by OpenCVE AI on October 27, 2026 at 18:29 UTC.

Remediation

No solution or workaround provided in the CVE record.

OpenCVE Recommended Actions

  • Install the latest Tanium Enforce patch or upgrade from Tanium’s official update channel.
  • Continuously monitor CPU, memory, and I/O usage of the Enforce service to detect abnormal consumption patterns.
  • If the patch is not immediately available, temporarily disable or limit high‑resource Enforce functions until the update is applied.

Generated by OpenCVE AI on October 27, 2026 at 18:29 UTC.

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

References
History

Tue, 27 Oct 2026 17:45:00 +0000

Type Values Removed Values Added
Description Tanium addressed an uncontrolled resource consumption vulnerability in Enforce.
Title Tanium addressed an uncontrolled resource consumption vulnerability in Enforce.
Weaknesses CWE-770
References
Metrics cvssV3_1

{'score': 4.3, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L'}


Subscriptions

No data.

cve-icon MITRE

Status: PUBLISHED

Assigner: Tanium

Published:

Updated: 2026-10-27T17:35:42.543Z

Reserved: 2026-10-26T19:15:07.631Z

Link: CVE-2026-116659

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Received

Published: 2026-10-27T18:17:34.850

Modified: 2026-10-27T18:17:34.850

Link: CVE-2026-116659

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

Updated: 2026-10-27T18:30:08Z

Weaknesses
  • CWE-770

    Allocation of Resources Without Limits or Throttling