5.3
MediumCVSS 3.1 · from Tanium
CVE-2026-108310
Tanium addressed a denial of service vulnerability in Tanium Server.
Tanium Server · Allocation without limits · CWE-770AffectedTanium Server
FixUpdate to 7.7.3.8351, 7.8.2.1263, 7.8.4.1399 or newer
PublishedOct 27, 17:33 · Tanium
ScoredOct 27 · 5.3 · Tanium
Exploit code publicNone known · checked 21:18 UTC
ExploitedNone known · CISA KEV checked 22:11 UTC
What we know
No known exploitation. CISA KEV, checked 22:11 UTC.
No public exploit code known. Exploit-DB, Metasploit, Nuclei, checked 21:18 UTC.
An attacker only needs network access to the target. No login needed. CVSS: network, no privileges.
Description
Tanium addressed a denial of service vulnerability in Tanium Server.
From Tanium
Affected and fixed versions
ProductAffectedFixed inTanium Server7.7.3 – before 7.7.3.83517.7.3.8351Tanium Server7.8.2 – before 7.8.2.12637.8.2.1263Tanium Server7.8.4 – before 7.8.4.13997.8.4.1399
Exploit code
Exploit-DBnone knownMetasploitnone knownNucleinone known