CVE-2026-116654

MediumCVSS 6.5/10Last modified Nov 12, 2026

Description

Tanium addressed an improper input validation vulnerability in Threat Response.

Metrics

CVSS 3.1 6.5/10CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N

Weakness enumeration

CWE-20

Affected software

VendorProductVersions
TaniumThreat Response>= 4.9, < 4.9.480; >= 4.12, < 4.12.353; >= 4.17, < 4.17.333

References

Timeline

Published
Nov 3, 2026
Last modified
Nov 12, 2026
NVD status
Analyzed

Related CVEs from 2026

CVE-2026-1166567.5Tanium addressed an uncontrolled resource consumption vulnerability in Enforce.CVE-2026-1166575.3Tanium addressed a denial of service vulnerability in Enforce.CVE-2026-1166586.5Tanium addressed a denial of service vulnerability in Enforce.CVE-2026-1166594.3Tanium addressed an uncontrolled resource consumption vulnerability in Enforce.CVE-2026-116665.4Insufficient validation of untrusted input in Input in Google Chrome prior to 149.0.7827.103 allowed a remote attacker to perform UI spoofinCVE-2026-1166604.3Tanium addressed an improper access controls vulnerability in Enforce.CVE-2026-1166616.5Tanium addressed an improper access controls vulnerability in Enforce.CVE-2026-1166627.5Tanium addressed a compression bomb vulnerability in Enforce.CVE-2026-1166636.5Tanium addressed an improper access controls vulnerability in Enforce.CVE-2026-1166643.1Tanium addressed an improper access controls vulnerability in Discover.CVE-2026-1166654.3Tanium addressed an information disclosure vulnerability in Discover.CVE-2026-1166664.3Tanium addressed an information disclosure vulnerability in Discover.
CVE-2026-116654: Medium severity, CVSS 6.5 | Vulnix