{"id":"CVE-2026-108309","title":"Tanium addressed an uncontrolled resource consumption vulnerability in Performance Client Extension.","summary":"Tanium addressed an uncontrolled resource consumption vulnerability in Performance Client Extension.","severity":"medium","cvss":5.5,"cvssVector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvssSource":"cna","cwe":["CWE-770"],"vendor":"Tanium","product":"Endpoint Configuration Toolset Solution","affected":["endpoint_configuration_toolset_solution >= 1.51 < 1.51.60","endpoint_configuration_toolset_solution >= 1.59 < 1.59.50","endpoint_configuration_toolset_solution >= 1.71 < 1.71.25","performance-cx >= 2.7.648 < 2.7.648","performance-cx >= 2.8.2110 < 2.8.2110","performance-cx >= 2.9.1165 < 2.9.1165","performance-cx >= 2.11.1312 < 2.11.1312","performance-cx >= 2.13.1010 < 2.13.1010","performance-cx >= 2.14.56 < 2.14.56"],"published":"2026-10-27","updated":"2026-10-27","sourceUpdated":"2026-10-27T17:35:23.693Z","source":"CVEORG","sourceUrl":"https://www.cve.org/CVERecord?id=CVE-2026-108309","references":[{"url":"https://security.tanium.com/TAN-2026-070","label":"TAN-2026-070"}],"tags":["cve.org"],"ingestedAt":"2026-10-27T17:54:31.811Z","slug":"CVE-2026-108309","body":"## Overview\n\nTanium addressed an uncontrolled resource consumption vulnerability in Performance Client Extension.\n\n## Affected\n\n- `endpoint_configuration_toolset_solution >= 1.51 < 1.51.60`\n- `endpoint_configuration_toolset_solution >= 1.59 < 1.59.50`\n- `endpoint_configuration_toolset_solution >= 1.71 < 1.71.25`\n- `performance-cx >= 2.7.648 < 2.7.648`\n- `performance-cx >= 2.8.2110 < 2.8.2110`\n- `performance-cx >= 2.9.1165 < 2.9.1165`\n- `performance-cx >= 2.11.1312 < 2.11.1312`\n- `performance-cx >= 2.13.1010 < 2.13.1010`\n- `performance-cx >= 2.14.56 < 2.14.56`\n\n## Remediation\n\nRefer to the linked advisories for vendor-supplied fixes and affected version ranges.","depth":"sunlit","depthScore":30,"depthScoreParts":{"impact":30.3,"likelihood":0,"exploitation":0,"ransomware":0},"changes":[]}