CVE-2026-116647

HighCVSS 7.1/10Last modified Nov 4, 2026

Description

Tanium addressed an improper output sanitization vulnerability in Comply.

Metrics

CVSS 3.1 7.1/10CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L

Weakness enumeration

CWE-1236

Affected software

Source: the vendor's advisory (CNA). NVD analysis pending.

VendorProductVersions
TaniumComply>= 2.32, < 2.32.263; >= 2.35, < 2.35.323; >= 2.37, < 2.37.326

References

Timeline

Published
Oct 27, 2026
Last modified
Nov 4, 2026
NVD status
Undergoing Analysis

Related CVEs from 2026

CVE-2026-1166484.1Tanium addressed an improper output sanitization vulnerability in Discover.CVE-2026-1166497.1Tanium addressed an improper output sanitization vulnerability in Enforce.CVE-2026-116654.3Out of bounds read in Dawn in Google Chrome on Windows prior to 149.0.7827.103 allowed a remote attacker to leak cross-origin data via a craCVE-2026-1166508.8Tanium addressed an unauthorized code execution vulnerability in Threat Response.CVE-2026-1166518.8Tanium addressed an unauthorized code execution vulnerability in Threat Response.CVE-2026-1166524.3Tanium addressed a business logic error in Threat Response.CVE-2026-1166534.3Tanium addressed an improper input validation vulnerability in Threat Response.CVE-2026-1166546.5Tanium addressed an improper input validation vulnerability in Threat Response.CVE-2026-1166567.5Tanium addressed an uncontrolled resource consumption vulnerability in Enforce.CVE-2026-1166575.3Tanium addressed a denial of service vulnerability in Enforce.CVE-2026-1166586.5Tanium addressed a denial of service vulnerability in Enforce.CVE-2026-1166594.3Tanium addressed an uncontrolled resource consumption vulnerability in Enforce.
CVE-2026-116647: High severity, CVSS 7.1 | Vulnix