---
id: "CVE-2026-87086"
kind: "vulnerability"
aliases: ["CVE-2026-87086"]
title: "Tanium Provision: denial of service flaw, details unknown"
severity: "high"
cvss: 7.5
epss: null
exploited: false
status: "open"
category: "vendor"
products: []
ecosystems: []
tags: ["denial-of-service", "provision", "tanium", "vendor"]
not_affected_if: []
published_at: "2026-10-27T18:17:38+00:00"
first_seen_at: "2026-10-27T18:33:00+00:00"
updated_at: "2026-10-27T18:35:37+00:00"
sources: [{"source": "nvd", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-87086", "first_seen_at": "2026-10-27T18:33:00+00:00"}, {"source": "analyst", "url": null, "first_seen_at": "2026-10-27T18:35:37+00:00"}]
---

# Tanium Provision: denial of service flaw, details unknown

Tanium addressed a denial-of-service vulnerability in Provision (CVE-2026-87086). The CVSS vector in the collector is network, no privileges, no user interaction, availability impact high, so an unauthenticated remote attacker could probably disrupt the service. Tanium's advisory with affected and fixed versions was not yet readable when checked.

_Summary, check and fix written by a model from the sources; labelled as such._

## How to check

unknown: check your Tanium Provision module version in the Tanium Console under Modules, then compare with the fixed version in Tanium's TAN-2026 advisory for this CVE (not yet located).

## Timeline

- 2026-10-27T18:33:00+00:00 nvd https://nvd.nist.gov/vuln/detail/CVE-2026-87086
- 2026-10-27T18:35:37+00:00 analyst — Tanium's own advisory (security.tanium.com TAN-2026-xxx) for this CVE not found: index lists 25 bulletins dated Oct 27 2026 without links or text, search finds none for Provision, NVD page not fetchable. Affected/fixed versions unknown; revisit once the TAN page is indexed. CVSS 7.5 vector AV:N/PR:N/UI:N/A:H comes from the collector (unauthenticated, network DoS). Nothing verified.

## From the sources

Tanium addressed a denial of service vulnerability in Provision.

---

_Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai_