{"affected":[{"product":"Endpoint Configuration Toolset Solution","source":"CNA: Tanium","vendor":"Tanium","versions":[{"lessThan":"1.51.60","status":"affected","version":"1.51","versionType":"custom"},{"lessThan":"1.59.50","status":"affected","version":"1.59","versionType":"custom"},{"lessThan":"1.71.25","status":"affected","version":"1.71","versionType":"custom"}]},{"product":"performance-cx","source":"CNA: Tanium","vendor":"Tanium","versions":[{"lessThan":"2.7.648","status":"affected","version":"2.7.648","versionType":"semver"},{"lessThan":"2.8.2110","status":"affected","version":"2.8.2110","versionType":"semver"},{"lessThan":"2.9.1165","status":"affected","version":"2.9.1165","versionType":"semver"},{"lessThan":"2.11.1312","status":"affected","version":"2.11.1312","versionType":"semver"},{"lessThan":"2.13.1010","status":"affected","version":"2.13.1010","versionType":"semver"},{"lessThan":"2.14.56","status":"affected","version":"2.14.56","versionType":"semver"}]}],"cveId":"CVE-2026-108309","cwes":["CWE-770"],"description":"Tanium addressed an uncontrolled resource consumption vulnerability in Performance Client Extension.","epss":{"date":"2026-11-04","percentile":0.01301,"score":0.0011},"exploits":[],"kev":null,"metrics":[{"score":5.5,"severity":"medium","source":"CNA: Tanium","vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","version":"3.1"}],"modifiedAt":1793813874673,"publishedAt":1793122523693,"references":[{"source":"CNA: Tanium","tags":[],"url":"https://security.tanium.com/TAN-2026-070"}],"remediation":[],"revision":"2b086d43c20ad8f9b29b2c3c08826405e2ce3e07ad13f4885e15a29ce672210d","sources":[{"modifiedAt":1793813874673,"name":"CNA: Tanium","retrievedAt":1793815728866,"url":"https://www.cve.org/CVERecord?id=CVE-2026-108309"},{"modifiedAt":null,"name":"FIRST EPSS","retrievedAt":1793815816187,"url":"https://api.first.org/data/v1/epss?cve=CVE-2026-108309"}],"ssvc":{"assessedAt":1793813859558,"automatable":"no","exploitation":"none","source":"ADP: CISA-ADP","technicalImpact":"partial"},"status":"published","title":"Tanium addressed an uncontrolled resource consumption vulnerability in Performance Client Extension.","updatedAt":1793815816187}