CVE-2026-1224

Unknown Unknown - Not Provided

Uncontrolled Resource Consumption in Tanium Discover Causes Denial of Service

Publication date: 2026-01-26

Last updated on: 2026-03-09

Assigner: Tanium

Description

Tanium addressed an uncontrolled resource consumption vulnerability in Discover.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-01-26

Last Modified

2026-03-09

Generated

2026-07-06

AI Q&A

2026-01-26

EPSS Evaluated

2026-07-05

NVD

CVE-2026-1224

EUVD

EUVD-2026-4667

Affected Vendors & Products

Vendor	Product	Version / Range
tanium	discover	From 4.15 (inc) to 4.15.130 (exc)
tanium	discover	From 4.10.0 (inc) to 4.10.134 (exc)

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-770	The product allocates a reusable resource or group of resources on behalf of an actor without imposing any intended restrictions on the size or number of resources that can be allocated.

Attack-Flow Graph

Executive Summary

CVE-2026-1224 is an uncontrolled resource consumption vulnerability in the Tanium Discover module. It allows an authenticated user with Discover Locations Write permission to perform a denial of service (DoS) attack by exhausting the resources of the Tanium Module Server. [1]

Impact Analysis

This vulnerability can impact you by enabling a denial of service (DoS) attack against the Tanium Module Server, potentially causing service disruption due to resource exhaustion. This could affect availability of the Tanium Discover service. [1]

Mitigation Strategies

The immediate step to mitigate this vulnerability is to apply the available updates for Tanium Discover. Specifically, update to Update 20 (v4.10.134) or later for the 2024H2 release, Update 13 (v4.10.134) or later for the 2025H1 release, or Update 3 (v4.15.130) or later for the 2025H2 release. No other workarounds or mitigations are provided. [1]

Hi! I’m here to help you understand CVE-2026-1224. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70