Tanium addressed an improper access controls vulnerability in Enforce.
Product
Tanium Enforce vulnerabilities
12 published CVES affecting Tanium Enforce, from public sources (CVE.org, NVD, CISA KEV, FIRST EPSS, OSV).
- Total
- 12
- Critical
- 0
- High
- 5
- Medium
- 7
- Low
- 0
- Unscored
- 0
- CISA KEV
- 0
Latest Tanium Enforce CVEs
Newest publication first
-
MediumCVSS 6.5 EPSS 0.21%
-
MediumCVSS 6.5 EPSS 0.25%
Tanium addressed an improper access controls vulnerability in Enforce.
-
CVE-2026-116656 Tanium addressed an uncontrolled resource consumption vulnerability in Enforce.
PublishedHighCVSS 7.5 EPSS 0.38%Tanium addressed an uncontrolled resource consumption vulnerability in Enforce.
-
CVE-2026-116659 Tanium addressed an uncontrolled resource consumption vulnerability in Enforce.
PublishedMediumCVSS 4.3 EPSS 0.30%Tanium addressed an uncontrolled resource consumption vulnerability in Enforce.
-
MediumCVSS 6.5 EPSS 0.34%
Tanium addressed a denial of service vulnerability in Enforce.
-
MediumCVSS 4.3 EPSS 0.23%
Tanium addressed an improper access controls vulnerability in Enforce.
-
CVE-2026-116649 Tanium addressed an improper output sanitization vulnerability in Enforce.
PublishedHighCVSS 7.1 EPSS 0.20%Tanium addressed an improper output sanitization vulnerability in Enforce.
-
MediumCVSS 5.3 EPSS 0.34%
Tanium addressed a denial of service vulnerability in Enforce.
-
HighCVSS 7.5 EPSS 0.38%
Tanium addressed a compression bomb vulnerability in Enforce.
-
HighCVSS 7.7 EPSS 0.34%
Tanium addressed a server-side request forgery vulnerability in Enforce.
-
HighCVSS 7.0 EPSS 0.17%
Tanium addressed an unauthorized code execution vulnerability in Enforce.
-
CVE-2025-15343 Tanium addressed an incorrect default permissions vulnerability in Enforce.
PublishedMediumCVSS 6.5 EPSS 0.34%Tanium addressed an incorrect default permissions vulnerability in Enforce.
Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.