CVE-2026-116661

MediumCVSS 6.5/10Last modified Nov 6, 2026

Description

Tanium addressed an improper access controls vulnerability in Enforce.

Metrics

CVSS 3.1 6.5/10CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N

Weakness enumeration

CWE-863

Affected software

Source: the vendor's advisory (CNA). NVD analysis pending.

VendorProductVersions
TaniumEnforce>= 3.0.0, < 3.0.373; >= 2.10.0, < 2.10.778

References

Timeline

Published
Nov 3, 2026
Last modified
Nov 6, 2026
NVD status
Undergoing Analysis

Related CVEs from 2026

CVE-2026-1166627.5Tanium addressed a compression bomb vulnerability in Enforce.CVE-2026-1166636.5Tanium addressed an improper access controls vulnerability in Enforce.CVE-2026-1166643.1Tanium addressed an improper access controls vulnerability in Discover.CVE-2026-1166654.3Tanium addressed an information disclosure vulnerability in Discover.CVE-2026-1166664.3Tanium addressed an information disclosure vulnerability in Discover.CVE-2026-1166674.2Tanium addressed an improper access controls vulnerability in Discover.CVE-2026-1166684.3Tanium addressed an uncontrolled resource consumption vulnerability in Discover.CVE-2026-1166696.5Tanium addressed an improper access controls vulnerability in Discover.CVE-2026-116677.5Out of bounds read in WebRTC in Google Chrome prior to 149.0.7827.103 allowed a remote attacker who had compromised the GPU process to potenCVE-2026-1166712.1Infinite loop in Xpdf 4.06 and earlier, due to incorrect validation of progression order field in JPEG 2000 image.CVE-2026-1166728.8Authlib is a Python library which builds OAuth and OpenID Connect servers. From 0.15 until 1.9.1, the documented ClientConfigurationEndpointCVE-2026-1166733.3systeminformation is a System and OS information library for node.js. Prior to 5.33.14, the Linux networkStats(iface) implementation uses th