CVE-2026-108309

MediumCVSS 5.5/10Last modified Nov 4, 2026

Description

Tanium addressed an uncontrolled resource consumption vulnerability in Performance Client Extension.

Metrics

CVSS 3.1 5.5/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Weakness enumeration

CWE-770

Affected software

Source: the vendor's advisory (CNA). NVD analysis pending.

VendorProductVersions
TaniumEndpoint Configuration Toolset Solution>= 1.51, < 1.51.60; >= 1.59, < 1.59.50; >= 1.71, < 1.71.25
Taniumperformance-cx>= 2.7.648, < 2.7.648; >= 2.8.2110, < 2.8.2110; >= 2.9.1165, < 2.9.1165; >= 2.11.1312, < 2.11.1312; >= 2.13.1010, < 2.13.1010; >= 2.14.56, < 2.14.56

References

Timeline

Published
Oct 27, 2026
Last modified
Nov 4, 2026
NVD status
Awaiting Analysis

Related CVEs from 2026

CVE-2026-108316.9A denial-of-service vulnerability exists in NPort devices because of improper access control on the command port. The command interface doesCVE-2026-1083105.3Tanium addressed a denial of service vulnerability in Tanium Server.CVE-2026-1083112.7Tanium addressed an insufficient logging vulnerability in Tanium Server.CVE-2026-1083136.6Tanium addressed an incorrect privilege assignment vulnerability in Tanium Server.CVE-2026-1083164.3Tanium addressed an information disclosure vulnerability in Tanium Server.CVE-2026-108325.9A flaw was found in the DERDecoder class within wildfly-elytron-asn1. A remote attacker can exploit this resource exhaustion vulnerability bCVE-2026-1083246.5Tanium addressed a denial of service vulnerability in Tanium Client.CVE-2026-1083256.6Tanium addressed an insertion of sensitive information into log file vulnerability in Reputation.CVE-2026-1083266.5Tanium addressed an improper certificate validation vulnerability in Stream Client Extension.CVE-2026-1083275.0Tanium addressed a path traversal vulnerability in Tanium Data Service.CVE-2026-1083284.2Tanium addressed an insertion of sensitive information into log file vulnerability in Threat Response.CVE-2026-1083298.8Tanium addressed an unauthorized code execution vulnerability in Threat Response.
CVE-2026-108309: Medium severity, CVSS 5.5 | Vulnix