CVE-2026-116662

HighCVSS 7.5/10Last modified Nov 4, 2026

Description

Tanium addressed a compression bomb vulnerability in Enforce.

Metrics

CVSS 3.1 7.5/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Weakness enumeration

CWE-409

Affected software

Source: the vendor's advisory (CNA). NVD analysis pending.

VendorProductVersions
TaniumEnforce>= 2.9, < 2.9.736; >= 2.10, < 2.10.778; >= 3.0, < 3.0.373

References

Timeline

Published
Oct 27, 2026
Last modified
Nov 4, 2026
NVD status
Undergoing Analysis

Related CVEs from 2026

CVE-2026-1166636.5Tanium addressed an improper access controls vulnerability in Enforce.CVE-2026-1166643.1Tanium addressed an improper access controls vulnerability in Discover.CVE-2026-1166654.3Tanium addressed an information disclosure vulnerability in Discover.CVE-2026-1166664.3Tanium addressed an information disclosure vulnerability in Discover.CVE-2026-1166674.2Tanium addressed an improper access controls vulnerability in Discover.CVE-2026-1166684.3Tanium addressed an uncontrolled resource consumption vulnerability in Discover.CVE-2026-1166696.5Tanium addressed an improper access controls vulnerability in Discover.CVE-2026-116677.5Out of bounds read in WebRTC in Google Chrome prior to 149.0.7827.103 allowed a remote attacker who had compromised the GPU process to potenCVE-2026-1166712.1Infinite loop in Xpdf 4.06 and earlier, due to incorrect validation of progression order field in JPEG 2000 image.CVE-2026-1166728.8Authlib is a Python library which builds OAuth and OpenID Connect servers. From 0.15 until 1.9.1, the documented ClientConfigurationEndpointCVE-2026-1166733.3systeminformation is a System and OS information library for node.js. Prior to 5.33.14, the Linux networkStats(iface) implementation uses thCVE-2026-1166746.5systeminformation is a System and OS information library for node.js. Prior to 5.33.13, networkStats(ifaces) in lib/network.js on FreeBSD, O
CVE-2026-116662: High severity, CVSS 7.5 | Vulnix