{"id":"CVE-2026-116656","kind":"vulnerability","aliases":["CVE-2026-116656"],"related":[],"title":"Tanium Enforce: uncontrolled resource consumption lets attackers exhaust resources","description":"Tanium addressed an uncontrolled resource consumption vulnerability in Enforce.","summary":"Tanium Enforce, a Tanium endpoint management component, has an uncontrolled resource consumption flaw. The sources do not say what input triggers it, so an attacker can at least degrade the service and possibly take it down.","severity":"high","cvss":7.5,"epss":null,"exploited":false,"exploited_at":null,"products":[],"ecosystems":[],"tags":["endpoint-management","tanium","vendor"],"not_affected_if":[],"how_to_check":"- Check the installed Tanium Enforce version against the vendor advisory: unknown\n- Check whether Enforce is deployed in your environment: unknown","fix":"- Apply the Tanium patch or update that addresses CVE-2026-116656: unknown","status":"open","published_at":"2026-10-27T18:17:34+00:00","first_seen_at":"2026-10-27T18:32:59+00:00","triaged_at":"2026-10-27T18:34:37+00:00","updated_at":"2026-10-27T18:34:37+00:00","category":"vendor","confidence":0.4,"triage":{"at":"2026-10-27T18:34:37Z","model":"claude-haiku-5-5","output":{"fix":"- Apply the Tanium patch or update that addresses CVE-2026-116656: unknown","reach":"unknown","title":"Tanium Enforce: uncontrolled resource consumption lets attackers exhaust resources","impact":"medium","summary":"Tanium Enforce, a Tanium endpoint management component, has an uncontrolled resource consumption flaw. The sources do not say what input triggers it, so an attacker can at least degrade the service and possibly take it down.","category":"vendor","nicknames":[],"who_cares":["tanium","endpoint-management"],"confidence":0.4,"needs_auth":"unknown","worst_case":"Service degraded or made unavailable through resource exhaustion","analyst_note":"Find the Tanium advisory for CVE-2026-116656 for affected versions, fixed versions and the trigger condition; the NVD entry at https://nvd.nist.gov/vuln/detail/CVE-2026-116656 may have more detail.","how_to_check":"- Check the installed Tanium Enforce version against the vendor advisory: unknown\n- Check whether Enforce is deployed in your environment: unknown","needs_analyst":true,"not_affected_if":[],"who_is_affected":"unknown. The sources name only Tanium Enforce and do not list affected versions, configurations or deployment patterns. Teams running Tanium should check the vendor advisory.","user_interaction":"unknown","needs_special_setup":"unknown","severity_if_unknown":"high"},"cost_usd":0.000581,"input_tokens":3238,"output_tokens":514,"severity_before":"high"},"analyst_status":null,"analyst_note":null,"search":"'-116656':12A,15A '-2026':11A,14A 'address':56C 'attack':7A,45B 'compon':27B 'consumpt':5A,32B,60C 'cve':10A,13A 'degrad':49B 'endpoint':17B,25B 'endpoint-manag':16B 'enforc':2A,22B,63C 'exhaust':8A 'flaw':33B 'input':40B 'least':48B 'let':6A 'manag':18B,26B 'possibl':53B 'resourc':4A,9A,31B,59C 'say':38B 'servic':51B 'sourc':35B 'take':54B 'tanium':1A,19B,21B,24B,55C 'trigger':41B 'uncontrol':3A,30B,58C 'vendor':20B 'vulner':61C","nicknames":[],"mitigations":[],"who_affected":null,"tier":"B","verified":{},"analyst_revisit_at":null,"first_public_at":"2026-10-27T18:17:34+00:00","kev":null,"cvss_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss_by":"3938794e-25f5-4123-a1ba-5cbd7f104512","poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-116656","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-116656","severity":null,"published_at":"2026-10-27T18:17:34+00:00","modified_at":"2026-10-27T18:17:34+00:00","first_seen_at":"2026-10-27T18:32:59+00:00","fetched_at":"2026-10-27T18:32:59+00:00","note":null}],"documents":[],"notice":"Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai"}