Compression Bomb Vulnerability in Tanium Enforce
CVE-2026-116662

7.5HIGH

Key Information:

Vendor

Tanium

Status
Enforce
Vendor
CVE Published:
27 October 2026

What is CVE-2026-116662?

A compression bomb vulnerability has been identified in Tanium Enforce, which may allow attackers to exploit system resources by triggering excessive resource consumption through crafted data. This vulnerability requires immediate attention to ensure that the system is properly secured and to mitigate potential disruptions or attacks.

Affected Version(s)

Enforce 2.9 < 2.9.736

Enforce 2.10 < 2.10.778

Enforce 3.0 < 3.0.373

References

https://security.tanium.com/TAN-2026-059

CVSS V3.1

Score:
7.5
Severity:
HIGH
Confidentiality:
None
Integrity:
None
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.