Tanium Server EUVD-2026-111244

No special conditions are documented beyond network reachability of the Tanium Server service - the CVSS vector (AV:N/AC:L/PR:N/UI:N) indicates remote, unauthenticated exploitation with no user interaction. The specific feature, protocol endpoint, or request type that triggers the resource exhaustion is not described in the available sources. Limiting factors: impact is confined to availability (A:L, no confidentiality or integrity loss), and exploitation requires that the attacker can reach the Tanium Server management service, which in many deployments is network-segmented and not internet-exposed. Affected deployments are those running Tanium Server below 7.7.3.8351, 7.8.2.1263, or 7.8.4.1399.

This is a medium-severity (CVSS 5.3) denial-of-service issue in Tanium Server, classified as CWE-770 (uncontrolled resource allocation). The CVSS vector (AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L) indicates a network-reachable, low-complexity, unauthenticated attack with no user interaction and only limited availability impact - no confidentiality or integrity loss. The vuln.today decision label is 'this_month', signaling a patch-on-normal-cadence priority rather than an emergency. No EPSS score, no CISA KEV listing, and no public exploit were provided in the input, so there is no signal of active or widespread exploitation; the availability-only impact and the self-report by Tanium are consistent with a routine hardening fix rather than a high-urgency threat. The main risk-elevating factor is that exploitation is unauthenticated and network-based, meaning any actor who can reach the Tanium Server service could potentially degrade its availability. The description is sparse ('addressed a denial of service vulnerability'), so the exact trigger mechanism is not described in the available sources - the resource-exhaustion nature is inferred from the CWE-770 mapping, not from a detailed vendor writeup. Net assessment: a real but moderate priority - worth patching on a normal cycle, not a drop-everything emergency, absent any exploitation evidence.

An attacker with network access to the Tanium Server service sends crafted or high-volume requests that cause uncontrolled resource consumption, degrading or disrupting the server's availability for legitimate administrative and endpoint-management operations. No authentication or user interaction is required per the CVSS vector. No public exploit code was identified in the provided data, and the precise triggering input is not described in the available sources.