{"id":"CVE-2026-87086","kind":"vulnerability","aliases":["CVE-2026-87086"],"related":[],"title":"Tanium Provision: denial of service flaw, details unknown","description":"Tanium addressed a denial of service vulnerability in Provision.","summary":"Tanium addressed a denial-of-service vulnerability in Provision (CVE-2026-87086). The CVSS vector in the collector is network, no privileges, no user interaction, availability impact high, so an unauthenticated remote attacker could probably disrupt the service. Tanium's advisory with affected and fixed versions was not yet readable when checked.","severity":"high","cvss":7.5,"epss":null,"exploited":false,"exploited_at":null,"products":[],"ecosystems":[],"tags":["denial-of-service","provision","tanium","vendor"],"not_affected_if":[],"how_to_check":"unknown: check your Tanium Provision module version in the Tanium Console under Modules, then compare with the fixed version in Tanium's TAN-2026 advisory for this CVE (not yet located).","fix":null,"status":"open","published_at":"2026-10-27T18:17:38+00:00","first_seen_at":"2026-10-27T18:33:00+00:00","triaged_at":"2026-10-27T18:34:33+00:00","updated_at":"2026-10-27T18:35:37+00:00","category":"vendor","confidence":0.3,"triage":{"at":"2026-10-27T18:34:33Z","model":"claude-haiku-5-5","output":{"fix":"unknown","reach":"unknown","title":"Tanium Provision: denial of service flaw, details unknown","impact":"low","summary":"Tanium has fixed a denial-of-service vulnerability in its Provision product, according to the NVD entry. The sources do not describe the trigger or the exact effect beyond service disruption.","category":"vendor","nicknames":[],"who_cares":["tanium","provision"],"confidence":0.35,"needs_auth":"unknown","worst_case":"Attacker can disrupt the Provision service, causing denial of service.","analyst_note":"Find Tanium's advisory for CVE-2026-87086 to get affected versions, fixed version, and attack preconditions; NVD page: https://nvd.nist.gov/vuln/detail/CVE-2026-87086","how_to_check":"unknown","needs_analyst":true,"not_affected_if":[],"who_is_affected":"unknown","user_interaction":"unknown","needs_special_setup":"unknown","severity_if_unknown":"high"},"cost_usd":0.000501,"input_tokens":3222,"output_tokens":357,"severity_before":"high"},"analyst_status":"done","analyst_note":"Find Tanium's advisory for CVE-2026-87086 to get affected versions, fixed version, and attack preconditions; NVD page: https://nvd.nist.gov/vuln/detail/CVE-2026-87086","search":"'-2026':10A,13A,33B '-87086':11A,14A,34B 'address':23B,76C 'advisori':63B 'affect':65B 'attack':55B 'avail':48B 'check':74B 'collector':40B 'could':56B 'cve':9A,12A,32B 'cvss':36B 'denial':3A,16B,26B,78C 'denial-of-servic':15B,25B 'detail':7A 'disrupt':58B 'fix':67B 'flaw':6A 'high':50B 'impact':49B 'interact':47B 'network':42B 'privileg':44B 'probabl':57B 'provis':2A,19B,31B,83C 'readabl':72B 'remot':54B 'servic':5A,18B,28B,60B,80C 'tanium':1A,20B,22B,61B,75C 'unauthent':53B 'unknown':8A 'user':46B 'vector':37B 'vendor':21B 'version':68B 'vulner':29B,81C 'yet':71B","nicknames":[],"mitigations":[],"who_affected":null,"tier":"B","verified":{},"analyst_revisit_at":null,"first_public_at":"2026-10-27T18:17:38+00:00","kev":null,"cvss_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss_by":"3938794e-25f5-4123-a1ba-5cbd7f104512","poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-87086","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-87086","severity":null,"published_at":"2026-10-27T18:17:38+00:00","modified_at":"2026-10-27T18:17:38+00:00","first_seen_at":"2026-10-27T18:33:00+00:00","fetched_at":"2026-10-27T18:33:00+00:00","note":null},{"source":"analyst","external_id":"CVE-2026-87086:910","url":null,"severity":null,"published_at":"2026-10-27T18:35:37+00:00","modified_at":"2026-10-27T18:35:37+00:00","first_seen_at":"2026-10-27T18:35:37+00:00","fetched_at":"2026-10-27T18:35:37+00:00","note":"Tanium's own advisory (security.tanium.com TAN-2026-xxx) for this CVE not found: index lists 25 bulletins dated Oct 27 2026 without links or text, search finds none for Provision, NVD page not fetchable. Affected/fixed versions unknown; revisit once the TAN page is indexed. CVSS 7.5 vector AV:N/PR:N/UI:N/A:H comes from the collector (unauthenticated, network DoS). Nothing verified."}],"documents":[],"notice":"Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai"}