---
id: "CVE-2026-116662"
kind: "vulnerability"
aliases: ["CVE-2026-116662"]
title: "Tanium Enforce: compression bomb flaw; sources give no fix details"
severity: "high"
cvss: 7.5
epss: null
exploited: false
status: "open"
category: "vendor"
products: []
ecosystems: []
tags: ["enforce", "tanium", "vendor"]
not_affected_if: []
published_at: "2026-10-27T18:17:35+00:00"
first_seen_at: "2026-10-27T18:32:59+00:00"
updated_at: "2026-10-27T18:36:05+00:00"
sources: [{"source": "nvd", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-116662", "first_seen_at": "2026-10-27T18:32:59+00:00"}, {"source": "analyst", "url": null, "first_seen_at": "2026-10-27T18:36:05+00:00"}]
---

# Tanium Enforce: compression bomb flaw; sources give no fix details

Tanium says it fixed a compression bomb vulnerability in its Enforce product. A compression bomb is a small compressed file that expands to a huge size, which can exhaust memory or disk and crash or stall the service.

_Summary, check and fix written by a model from the sources; labelled as such._

## How to check

unknown: no primary advisory found for this CVE id

## Fix

unknown

## Timeline

- 2026-10-27T18:32:59+00:00 nvd https://nvd.nist.gov/vuln/detail/CVE-2026-116662
- 2026-10-27T18:36:05+00:00 analyst — Could not find a Tanium advisory for an Enforce compression bomb. Tanium's compression-bomb advisories cover Findings (TAN-2026-020, CVE-2026-11617) and Threat Response (TAN-2026-021, CVE-2026-75476), both Low 3.1 DoS-only. I checked TAN-2026-020 to 047 and the only Enforce advisories are 022 (local privilege escalation) and 036 (SSRF), neither a compression bomb. The NVD page for this id returned nothing, and this id looks like a possible typo or mix-up with those CVEs. Enforce fixed builds that other Oct 27 advisories use: v2.9.718, v2.10.760, v3.0.346, but they are NOT confirmed for this CVE. Nothing verified. To settle it, read the NVD/CVE record for CVE-2026-116662 or the Tanium advisory index (security.tanium.com), whose titles do not render.

## From the sources

Tanium addressed a compression bomb vulnerability in Enforce.

---

_Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai_