Is CVE-2026-116646 exploited in the wild?

No. Junglewise Threat Intelligence has no report of CVE-2026-116646 being exploited in the wild.

How severe is CVE-2026-116646?

Medium severity, with a CVSS score of 4.3, published 3 November 2026.

Which products and versions are affected?

Tanium Threat Response 2025H1 v4.9 to v4.9.480, 2025H2 v4.12 to v4.12.353, 2026H1 v4.17 to v4.17.333.

Is there a fix for CVE-2026-116646?

Yes: fixed in Threat Response 2025H1 Update 27 (v4.9.480), 2025H2 Update 17 (v4.12.353), 2026H1 Update 10 (v4.17.333). Junglewise finds every place you run it, drafts the upgrade and applies it once you approve.

How is CVE-2026-116646 attacked?

It is attacked over the network, in a network appliance.

Am I affected by CVE-2026-116646?

Check whether you run Tanium Threat Response at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

CVE-2026-116646: Tanium Threat Response uncontrolled resource consumption

CVE-2026-116646 · Severity: medium · CVSS 4.3 · Published 2026-11-03

Tanium Threat Response is a security platform that helps organizations detect and respond to threats. An authenticated user with read-only permissions can trigger excessive resource consumption, causing the service to become unavailable and preventing legitimate security incident response activities.

Technologies: Tanium Threat Response. Vendors: Tanium.

Quick answers

Is CVE-2026-116646 exploited in the wild?: No. Junglewise Threat Intelligence has no report of CVE-2026-116646 being exploited in the wild.
How severe is CVE-2026-116646?: Medium severity, with a CVSS score of 4.3, published 3 November 2026.
Which products and versions are affected?: Tanium Threat Response 2025H1 v4.9 to v4.9.480, 2025H2 v4.12 to v4.12.353, 2026H1 v4.17 to v4.17.333.
Is there a fix for CVE-2026-116646?: Yes: fixed in Threat Response 2025H1 Update 27 (v4.9.480), 2025H2 Update 17 (v4.12.353), 2026H1 Update 10 (v4.17.333). Junglewise finds every place you run it, drafts the upgrade and applies it once you approve.
How is CVE-2026-116646 attacked?: It is attacked over the network, in a network appliance.
Am I affected by CVE-2026-116646?: Check whether you run Tanium Threat Response at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

How to fix

Fixed in: Threat Response 2025H1 Update 27 (v4.9.480), 2025H2 Update 17 (v4.12.353), 2026H1 Update 10 (v4.17.333)

Technical details

An uncontrolled resource consumption vulnerability in Threat Response allows an authenticated attacker with Threat Response Read Only permission to cause a denial of service. The vulnerability requires network access and prior authentication but no user interaction. The attack results in service unavailability for the affected component.

Affected products

Tanium Threat Response 2025H1 v4.9 to v4.9.480, 2025H2 v4.12 to v4.12.353, 2026H1 v4.17 to v4.17.333

Timeline

2026-11-03: disclosed: CVE-2026-116646 published

References

https://security.tanium.com/TAN-2026-097

This page as Markdown. Free to reuse under CC BY 4.0 with a link back.