Compression Bomb Vulnerability in Tanium Findings
CVE-2026-11617

3.1LOW

Key Information:

Vendor

Tanium

Status
Findings
Vendor
CVE Published:
19 August 2026

What is CVE-2026-11617?

The vulnerability in Tanium Findings stems from a compression bomb attack that can overwhelm system resources, potentially leading to service disruptions. This issue has been addressed by Tanium, and users are encouraged to update their systems to mitigate any risks associated with this vulnerability. For further details, you can refer to the security advisory at TAN-2026-020.

Affected Version(s)

Findings 1.2 < 1.2.95

Findings 1.4 < 1.4.105

References

https://security.tanium.com/TAN-2026-020

CVSS V3.1

Score:
3.1
Severity:
LOW
Confidentiality:
None
Integrity:
None
Availability:
None
Attack Vector:
Network
Attack Complexity:
High
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.