All vulnerabilities
CVE-2026-108309

Endpoint Configuration Toolset Solution: Tanium addressed an uncontrolled resource consumption vulnerability in Performance Client Extension.

Tanium Endpoint Configuration Toolset Solution
Open in ThreatlineRecord JSON
CVSS
5.5Medium
ExploitationNo known exploitationNot in CISA KEV, which does not prove it is unexploitedCISA KEV
Exploit odds (EPSS)No scoreNo FIRST EPSS score in this snapshot yet
Fixed in1.51.60Also 1.59.50, 1.71.25 and 6 moreCVE List
Published27 Oct 2026Updated 27 Oct 2026CVE List

What fixes it

  • 1.51.60Endpoint Configuration Toolset SolutionCVE List
  • 1.59.50Endpoint Configuration Toolset SolutionCVE List
  • 1.71.25Endpoint Configuration Toolset SolutionCVE List
  • 2.7.648performance-cxCVE List
  • 2.8.2110performance-cxCVE List
  • 2.9.1165performance-cxCVE List
Show all 9 fixed versions

A fixed version on one release line is not the upgrade target for every line. Check your exact version and any vendor backports.

Description

Tanium addressed an uncontrolled resource consumption vulnerability in Performance Client Extension.

Text from CVE List

Affected versions 9

  • Endpoint Configuration Toolset Solutionaffected: 1.51 before 1.51.60CVE List
  • Endpoint Configuration Toolset Solutionaffected: 1.59 before 1.59.50CVE List
  • Endpoint Configuration Toolset Solutionaffected: 1.71 before 1.71.25CVE List
  • performance-cxaffected: 2.7.648 before 2.7.648CVE List
  • performance-cxaffected: 2.8.2110 before 2.8.2110CVE List
  • performance-cxaffected: 2.9.1165 before 2.9.1165CVE List
  • performance-cxaffected: 2.11.1312 before 2.11.1312CVE List
  • performance-cxaffected: 2.13.1010 before 2.13.1010CVE List
  • performance-cxaffected: 2.14.56 before 2.14.56CVE List

References 1