Is CVE-2026-116663 exploited in the wild?

No. Junglewise Threat Intelligence has no report of CVE-2026-116663 being exploited in the wild.

How severe is CVE-2026-116663?

Medium severity, with a CVSS score of 6.5, published 3 November 2026.

Which products and versions are affected?

Tanium Enforce v3.0.0 to v3.0.372 (2026H1 Release prior to Update 9).

Is there a fix for CVE-2026-116663?

Yes: fixed in Enforce v3.0.373 (2026H1 Release Update 9) and later. Junglewise finds every place you run it, drafts the upgrade and applies it once you approve.

How is CVE-2026-116663 attacked?

It is attacked over the network, in a network appliance.

Am I affected by CVE-2026-116663?

Check whether you run Tanium Enforce at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

CVE-2026-116663: Tanium Enforce improper access control vulnerability

CVE-2026-116663 · Severity: medium · CVSS 6.5 · Published 2026-11-03

Tanium Enforce is a policy management system that organizations use to control and monitor endpoints across their networks. An authenticated user with the Enforce Policy Write permission can exploit an access control flaw to read data they should not have access to, potentially exposing sensitive configuration or policy information.

Technologies: Tanium Enforce. Vendors: Tanium.

Quick answers

Is CVE-2026-116663 exploited in the wild?: No. Junglewise Threat Intelligence has no report of CVE-2026-116663 being exploited in the wild.
How severe is CVE-2026-116663?: Medium severity, with a CVSS score of 6.5, published 3 November 2026.
Which products and versions are affected?: Tanium Enforce v3.0.0 to v3.0.372 (2026H1 Release prior to Update 9).
Is there a fix for CVE-2026-116663?: Yes: fixed in Enforce v3.0.373 (2026H1 Release Update 9) and later. Junglewise finds every place you run it, drafts the upgrade and applies it once you approve.
How is CVE-2026-116663 attacked?: It is attacked over the network, in a network appliance.
Am I affected by CVE-2026-116663?: Check whether you run Tanium Enforce at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

How to fix

Fixed in: Enforce v3.0.373 (2026H1 Release Update 9) and later

Technical details

An improper access controls vulnerability in Tanium Enforce allows authenticated users with Enforce Policy Write permission on any content set to escalate privileges and access read-only data outside their intended scope. The vulnerability requires authentication and network access but no user interaction. The flaw enables unauthorized information disclosure without modification or availability impact.

Affected products

Tanium Enforce v3.0.0 to v3.0.372 (2026H1 Release prior to Update 9)

Timeline

2026-11-03: disclosed

References

https://security.tanium.com/TAN-2026-099

This page as Markdown. Free to reuse under CC BY 4.0 with a link back.