CVE-2026-108309
MEDIUMCVSS 5.5/10
Last modified
CVE-2026-108309 is a medium-severity vulnerability rated 5.5/10 on the CVSS scale. Tanium addressed an uncontrolled resource consumption vulnerability in Performance Client Extension..
Description
Tanium addressed an uncontrolled resource consumption vulnerability in Performance Client Extension.
Metrics
Weakness Enumeration
Affected Software
Source: CNA advisory (CVE.org). NVD analysis pending.
| Vendor | Product | Versions |
|---|---|---|
| Tanium | Endpoint Configuration Toolset Solution | >= 1.51, < 1.51.60; >= 1.59, < 1.59.50; >= 1.71, < 1.71.25 |
| Tanium | performance-cx | >= 2.7.648, < 2.7.648; >= 2.8.2110, < 2.8.2110; >= 2.9.1165, < 2.9.1165; >= 2.11.1312, < 2.11.1312; >= 2.13.1010, < 2.13.1010; >= 2.14.56, < 2.14.56 |
References
Timeline
- Published
- Last Modified
- Status
- Awaiting Analysis
Frequently Asked Questions
What is CVE-2026-108309?
Tanium addressed an uncontrolled resource consumption vulnerability in Performance Client Extension.
How severe is CVE-2026-108309?
CVE-2026-108309 has a CVSS score of 5.5/10 (MEDIUM severity).
How do I fix CVE-2026-108309?
Check the vendor references and advisories linked above for patched versions and mitigation guidance. You can also run a Strix scan to test if your systems are affected.
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2026
- CVE-2026-108303Tanium addressed an unauthorized code execution vulnerabilit…8.8
- CVE-2026-108304Tanium addressed a local privilege escalation vulnerability …7.8
- CVE-2026-108305Tanium addressed a local privilege escalation vulnerability …7.8
- CVE-2026-108306Tanium addressed a local privilege escalation vulnerability …7.8
- CVE-2026-108307Tanium addressed a heap-based buffer overflow vulnerability …7.8
- CVE-2026-108308Tanium addressed a SQL injection vulnerability in Patch.6.5
- CVE-2026-10831A denial-of-service vulnerability exists in NPort devices be…6.9
- CVE-2026-108310Tanium addressed a denial of service vulnerability in Tanium…5.3
- CVE-2026-108311Tanium addressed an insufficient logging vulnerability in Ta…2.7
- CVE-2026-108313Tanium addressed an incorrect privilege assignment vulnerabi…6.6
- CVE-2026-108316Tanium addressed an information disclosure vulnerability in …4.3
- CVE-2026-10832A flaw was found in the DERDecoder class within wildfly-elyt…5.9
Are you affected by CVE-2026-108309?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST