Is CVE-2026-15053 exploited in the wild?

No. Junglewise Threat Intelligence has no report of CVE-2026-15053 being exploited in the wild.

How severe is CVE-2026-15053?

High severity, with a CVSS score of 7.5, published 8 July 2026.

Which products and versions are affected?

Tanium Server 7.7.3.8298 (2025H1 Release) before Update MR21; 7.8.2.1198 (2025H2 Release) before Update MR11; 7.8.4.1327 (2026H1 Release) before Update MR3.

Is there a fix for CVE-2026-15053?

A patch was published on 2026-07-08. Junglewise finds every place you run it, drafts the upgrade and applies it once you approve.

How is CVE-2026-15053 attacked?

It is attacked over the network, in a network appliance.

Am I affected by CVE-2026-15053?

Check whether you run Tanium Server at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

CVE-2026-15053: Tanium Server denial of service via excessive memory allocation

CVE-2026-15053 · Severity: high · CVSS 7.5 · Published 2026-07-08

Tanium Server, a platform used for managing and securing large-scale enterprise networks, is affected by a denial of service vulnerability. An attacker could exploit this flaw to crash the server or make it unresponsive, preventing administrators from managing their endpoints or responding to security incidents. The issue has been addressed in recent software updates, and organizations are encouraged to apply the latest patches to maintain operational availability.

Technologies: Tanium Server. Vendors: Tanium.

Quick answers

Is CVE-2026-15053 exploited in the wild?: No. Junglewise Threat Intelligence has no report of CVE-2026-15053 being exploited in the wild.
How severe is CVE-2026-15053?: High severity, with a CVSS score of 7.5, published 8 July 2026.
Which products and versions are affected?: Tanium Server 7.7.3.8298 (2025H1 Release) before Update MR21; 7.8.2.1198 (2025H2 Release) before Update MR11; 7.8.4.1327 (2026H1 Release) before Update MR3.
Is there a fix for CVE-2026-15053?: A patch was published on 2026-07-08. Junglewise finds every place you run it, drafts the upgrade and applies it once you approve.
How is CVE-2026-15053 attacked?: It is attacked over the network, in a network appliance.
Am I affected by CVE-2026-15053?: Check whether you run Tanium Server at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

Technical details

A denial of service vulnerability exists in Tanium Server due to improper handling of memory allocation (CWE-789). An unauthenticated, network-based attacker can trigger the allocation of an excessive amount of memory, potentially leading to resource exhaustion and a crash of the server process. The vulnerability is reachable over the network without user interaction or prior authentication. Tanium has released patches across multiple release branches, including 2025H1 (MR21), 2025H2 (MR11), and 2026H1 (MR3). Organizations should update to the specified versions or later to mitigate this risk.

Affected products

Tanium Tanium Server 7.7.3.8298 (2025H1 Release) before Update MR21; 7.8.2.1198 (2025H2 Release) before Update MR11; 7.8.4.1327 (2026H1 Release) before Update MR3

Timeline

2026-07-08: advisory
2026-07-08: patched

References

https://security.tanium.com/TAN-2026-016

This page as Markdown. Free to reuse under CC BY 4.0 with a link back.