---
id: "CVE-2026-116660"
kind: "vulnerability"
aliases: ["CVE-2026-116660"]
title: "Tanium Enforce: improper access controls flaw, details not published"
severity: "medium"
cvss: 4.3
epss: null
exploited: false
status: "open"
category: "vendor"
products: []
ecosystems: []
tags: ["enforce", "tanium", "vendor"]
not_affected_if: []
published_at: "2026-10-27T18:17:34+00:00"
first_seen_at: "2026-10-27T18:32:59+00:00"
updated_at: "2026-10-27T18:34:59+00:00"
sources: [{"source": "nvd", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-116660", "first_seen_at": "2026-10-27T18:32:59+00:00"}]
---

# Tanium Enforce: improper access controls flaw, details not published

Tanium fixed an improper access controls flaw in its Enforce product, according to NVD. The sources do not say what an attacker can reach or do with it.

_Summary, check and fix written by a model from the sources; labelled as such._

## Timeline

- 2026-10-27T18:32:59+00:00 nvd https://nvd.nist.gov/vuln/detail/CVE-2026-116660

## From the sources

Tanium addressed an improper access controls vulnerability in Enforce.

---

_Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai_