CVE-2026-116663: medium-severity vulnerability in Tanium Enforce
Tanium addressed an improper access controls vulnerability in Enforce.
Published
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
10Vexday Risk Score
No sign of exploitation. No public exploitation artifact known so far.
ssvc Trackcvss 6.5
Tanium addressed an improper access controls vulnerability in Enforce.
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Affected products
Tanium · EnforceRelated CVEs — Tanium Enforce
In the same product, most dangerous first.
CVE-2026-116656HIGHTanium addressed an uncontrolled resource consumption vulnerability in Enforce.EPSS 0.4%CVE-2026-116662HIGHTanium addressed a compression bomb vulnerability in Enforce.EPSS 0.4%CVE-2026-87084HIGHTanium addressed a server-side request forgery vulnerability in Enforce.EPSS 0.3%CVE-2026-116657MEDIUMTanium addressed a denial of service vulnerability in Enforce.EPSS 0.3%CVE-2025-15343MEDIUMTanium addressed an incorrect default permissions vulnerability in Enforce.EPSS 0.3%CVE-2026-116658MEDIUMTanium addressed a denial of service vulnerability in Enforce.EPSS 0.3%
References
https://security.tanium.com/TAN-2026-099