Improper Access Controls in Tanium Enforce Software
CVE-2026-116661

6.5MEDIUM

Key Information:

Vendor

Tanium

Status
Enforce
Vendor
CVE Published:
3 November 2026

What is CVE-2026-116661?

Tanium has released a security update to address an improper access controls vulnerability found in its Enforce product. This vulnerability potentially allows unauthorized users to access sensitive functionalities and data, impacting the confidentiality and integrity of the system. Organizations using Tanium Enforce should promptly apply the latest security updates to safeguard against these risks. For more details, please view TAN-2026-096.

Affected Version(s)

Enforce 3.0.0 < 3.0.373

Enforce 2.10.0 < 2.10.778

References

https://security.tanium.com/TAN-2026-096

CVSS V3.1

Score:
6.5
Severity:
MEDIUM
Confidentiality:
None
Integrity:
High
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.