← Back to CVE Explorer

CVE-2026-108309

Full vulnerability record from the local CVENow database.

Description

Tanium addressed an uncontrolled resource consumption vulnerability in Performance Client Extension.

Severity

MEDIUM

CVSS score

5.5 (v3.1)

Vulnerability status

Awaiting Analysis

Source identifier

3938794e-25f5-4123-a1ba-5cbd7f104512

Published

2026-10-27 18:17:32.537000

Last modified

2026-10-28 14:15:58.863000

View original CVE JSON

{
  "id": "CVE-2026-108309",
  "sourceIdentifier": "3938794e-25f5-4123-a1ba-5cbd7f104512",
  "published": "2026-10-27T18:17:32.537",
  "lastModified": "2026-10-28T14:15:58.863",
  "vulnStatus": "Awaiting Analysis",
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "Tanium addressed an uncontrolled resource consumption vulnerability in Performance Client Extension."
    }
  ],
  "affected": [
    {
      "source": "3938794e-25f5-4123-a1ba-5cbd7f104512",
      "affectedData": [
        {
          "vendor": "Tanium",
          "product": "Endpoint Configuration Toolset Solution",
          "versions": [
            {
              "version": "1.51",
              "lessThan": "1.51.60",
              "versionType": "custom",
              "status": "affected"
            },
            {
              "version": "1.59",
              "lessThan": "1.59.50",
              "versionType": "custom",
              "status": "affected"
            },
            {
              "version": "1.71",
              "lessThan": "1.71.25",
              "versionType": "custom",
              "status": "affected"
            }
          ]
        },
        {
          "vendor": "Tanium",
          "product": "performance-cx",
          "versions": [
            {
              "version": "2.7.648",
              "lessThan": "2.7.648",
              "versionType": "semver",
              "status": "affected"
            },
            {
              "version": "2.8.2110",
              "lessThan": "2.8.2110",
              "versionType": "semver",
              "status": "affected"
            },
            {
              "version": "2.9.1165",
              "lessThan": "2.9.1165",
              "versionType": "semver",
              "status": "affected"
            },
            {
              "version": "2.11.1312",
              "lessThan": "2.11.1312",
              "versionType": "semver",
              "status": "affected"
            },
            {
              "version": "2.13.1010",
              "lessThan": "2.13.1010",
              "versionType": "semver",
              "status": "affected"
            },
            {
              "version": "2.14.56",
              "lessThan": "2.14.56",
              "versionType": "semver",
              "status": "affected"
            }
          ]
        }
      ]
    }
  ],
  "metrics": {
    "cvssMetricV31": [
      {
        "source": "3938794e-25f5-4123-a1ba-5cbd7f104512",
        "type": "Secondary",
        "cvssData": {
          "version": "3.1",
          "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
          "baseScore": 5.5,
          "baseSeverity": "MEDIUM",
          "attackVector": "LOCAL",
          "attackComplexity": "LOW",
          "privilegesRequired": "LOW",
          "userInteraction": "NONE",
          "scope": "UNCHANGED",
          "confidentialityImpact": "NONE",
          "integrityImpact": "NONE",
          "availabilityImpact": "HIGH"
        },
        "exploitabilityScore": 1.8,
        "impactScore": 3.6
      }
    ]
  },
  "weaknesses": [
    {
      "source": "3938794e-25f5-4123-a1ba-5cbd7f104512",
      "type": "Secondary",
      "description": [
        {
          "lang": "en",
          "value": "CWE-770"
        }
      ]
    }
  ],
  "references": [
    {
      "url": "https://security.tanium.com/TAN-2026-070",
      "source": "3938794e-25f5-4123-a1ba-5cbd7f104512"
    }
  ]
}