CVE-2026-9156
Analyzed Analyzed - Analysis Complete
Denial of Service Vulnerability in Tanium Server

Publication date: 2026-05-27

Last updated on: 2026-05-29

Assigner: Tanium

Description
Tanium addressed a denial of service vulnerability in Tanium Server.
CVSS Scores
EPSS Scores
Probability:
Percentile:
Meta Information
Published
2026-05-27
Last Modified
2026-05-29
Generated
2026-06-16
AI Q&A
2026-05-27
EPSS Evaluated
2026-06-15
NVD
CVE-2026-9156
EUVD
EUVD-2026-32034
Affected Vendors & Products
Showing 3 associated CPEs
Vendor Product Version / Range
tanium server From 7.6.4.0 (inc) to 7.6.4.2190 (exc)
tanium server From 7.7.3.0 (inc) to 7.7.3.8274 (exc)
tanium server From 7.8.2.0 (inc) to 7.8.2.1176 (exc)
Helpful Resources
Exploitability
CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-772 The product does not release a resource after its effective lifetime has ended, i.e., after the resource is no longer needed.
Attack-Flow Graph
AI Quick Actions
Instant insights powered by AI
Executive Summary

CVE-2026-9156 is a medium-severity denial of service vulnerability in Tanium Server. It allows an unauthenticated attacker with network access to send specially crafted malicious messages that exhaust the server's file descriptors and memory resources.

This exhaustion of resources can cause the Tanium Server to become unresponsive or crash, disrupting its normal operation.

Impact Analysis

The vulnerability can lead to a denial of service condition on the Tanium Server, making it unavailable to legitimate users.

This disruption can affect the availability of services and data managed by the Tanium Server, potentially impacting business operations that rely on it.

Detection Guidance

There is no specific information provided about detection methods or commands to identify this vulnerability on your network or system.

Mitigation Strategies

The recommended immediate step to mitigate this vulnerability is to apply the available patches for Tanium Server.

  • For the 2024H2 release, update to Update 25 (v7.6.4.2190) or later.
  • For the 2025H1 release, update to Update 19 (v7.7.3.8274) or later.
  • For the 2025H2 release, update to Update 9 (v7.8.2.1176) or later.
  • For the 2026H1 release, update to Update 0 (v7.8.4.1298) or later.

No workarounds or other mitigations are provided.

Compliance Impact

The provided information does not specify any impact of this denial of service vulnerability on compliance with common standards and regulations such as GDPR or HIPAA.

Chat Assistant
Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-9156. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70
EPSS Chart