Is CVE-2026-87086 exploited in the wild?

No. Junglewise Threat Intelligence has no report of CVE-2026-87086 being exploited in the wild.

How severe is CVE-2026-87086?

High severity, with a CVSS score of 7.5, published 27 October 2026.

Which products and versions are affected?

Tanium Provision 2025H1 (v1.17 to v1.17.150), 2025H2 (v1.23 to v1.23.161), 2026H1 (v1.24 to v1.24.199).

Is there a fix for CVE-2026-87086?

Yes: fixed in 2025H1 Update 26 (Provision v1.17.150) and later, 2025H2 Update 16 (Provision v1.23.161) and later, 2026H1 Update 9 (Provision v1.24.199) and later. Junglewise finds every place you run it, drafts the upgrade and applies it once you approve.

How is CVE-2026-87086 attacked?

It is attacked over the network, in a hosted service.

Am I affected by CVE-2026-87086?

Check whether you run Tanium Provision at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

CVE-2026-87086: Tanium Provision denial of service

CVE-2026-87086 · Severity: high · CVSS 7.5 · Published 2026-10-27

Tanium Provision is a module that manages endpoint provisioning and deployment. An unauthenticated attacker on the network can trigger a denial of service that disrupts the provisioning service. This could prevent new endpoints from being configured or updated, impacting business continuity.

Technologies: Tanium Provision. Vendors: Tanium.

Quick answers

Is CVE-2026-87086 exploited in the wild?: No. Junglewise Threat Intelligence has no report of CVE-2026-87086 being exploited in the wild.
How severe is CVE-2026-87086?: High severity, with a CVSS score of 7.5, published 27 October 2026.
Which products and versions are affected?: Tanium Provision 2025H1 (v1.17 to v1.17.150), 2025H2 (v1.23 to v1.23.161), 2026H1 (v1.24 to v1.24.199).
Is there a fix for CVE-2026-87086?: Yes: fixed in 2025H1 Update 26 (Provision v1.17.150) and later, 2025H2 Update 16 (Provision v1.23.161) and later, 2026H1 Update 9 (Provision v1.24.199) and later. Junglewise finds every place you run it, drafts the upgrade and applies it once you approve.
How is CVE-2026-87086 attacked?: It is attacked over the network, in a hosted service.
Am I affected by CVE-2026-87086?: Check whether you run Tanium Provision at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

How to fix

Fixed in: 2025H1 Update 26 (Provision v1.17.150) and later, 2025H2 Update 16 (Provision v1.23.161) and later, 2026H1 Update 9 (Provision v1.24.199) and later

Technical details

The vulnerability is a denial of service in the Tanium Provision module triggered by a network-based attack vector requiring no authentication or user interaction. An unauthenticated attacker can send a crafted network request to cause service unavailability or crash the Provision module, affecting availability.

Affected products

Tanium Provision 2025H1 (v1.17 to v1.17.150), 2025H2 (v1.23 to v1.23.161), 2026H1 (v1.24 to v1.24.199)

Timeline

2026-10-27: advisory

References

https://security.tanium.com/TAN-2026-080

This page as Markdown. Free to reuse under CC BY 4.0 with a link back.