Is CVE-2026-116656 exploited in the wild?

No. Junglewise Threat Intelligence has no report of CVE-2026-116656 being exploited in the wild.

How severe is CVE-2026-116656?

High severity, with a CVSS score of 7.5, published 27 October 2026.

Which products and versions are affected?

Tanium Enforce 2.9 to 2.9.735, 2.10 to 2.10.777, 3.0 to 3.0.372.

Is there a fix for CVE-2026-116656?

Yes: fixed in Enforce 2.9.736 (2025H1 Update 26), 2.10.778 (2025H2 Update 16), 3.0.373 (2026H1 Update 9). Junglewise finds every place you run it, drafts the upgrade and applies it once you approve.

How is CVE-2026-116656 attacked?

It is attacked over the network, in a hosted service.

Am I affected by CVE-2026-116656?

Check whether you run Tanium Enforce at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

CVE-2026-116656: Tanium Enforce uncontrolled resource consumption denial of service

CVE-2026-116656 · Severity: high · CVSS 7.5 · Published 2026-10-27

Tanium Enforce is a policy management and compliance solution used to enforce security policies across organizations. An uncontrolled resource consumption vulnerability could allow an authenticated user without administrative permissions to perform a denial of service attack, potentially disrupting policy enforcement and system availability.

Technologies: Tanium Enforce. Vendors: Tanium.

Quick answers

Is CVE-2026-116656 exploited in the wild?: No. Junglewise Threat Intelligence has no report of CVE-2026-116656 being exploited in the wild.
How severe is CVE-2026-116656?: High severity, with a CVSS score of 7.5, published 27 October 2026.
Which products and versions are affected?: Tanium Enforce 2.9 to 2.9.735, 2.10 to 2.10.777, 3.0 to 3.0.372.
Is there a fix for CVE-2026-116656?: Yes: fixed in Enforce 2.9.736 (2025H1 Update 26), 2.10.778 (2025H2 Update 16), 3.0.373 (2026H1 Update 9). Junglewise finds every place you run it, drafts the upgrade and applies it once you approve.
How is CVE-2026-116656 attacked?: It is attacked over the network, in a hosted service.
Am I affected by CVE-2026-116656?: Check whether you run Tanium Enforce at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

How to fix

Fixed in: Enforce 2.9.736 (2025H1 Update 26), 2.10.778 (2025H2 Update 16), 3.0.373 (2026H1 Update 9)

Technical details

The vulnerability is an uncontrolled resource consumption flaw in Tanium Enforce accessible to authenticated users without elevated privileges. A remote authenticated attacker with no permissions can trigger excessive resource consumption leading to denial of service. Patches are available for all affected versions.

Affected products

Tanium Enforce 2.9 to 2.9.735, 2.10 to 2.10.777, 3.0 to 3.0.372

Timeline

2026-10-27: disclosed

References

https://security.tanium.com/TAN-2026-071

This page as Markdown. Free to reuse under CC BY 4.0 with a link back.