CVE-2026-6416
Full vulnerability record from the local CVENow database.
Description
Tanium addressed an uncontrolled resource consumption vulnerability in Interact.
Severity
MEDIUM
CVSS score
4.9
(v3.1)
Vulnerability status
Analyzed
Source identifier
3938794e-25f5-4123-a1ba-5cbd7f104512
Published
2026-04-22 03:16:01.643000
Last modified
2026-10-26 21:10:00.170000
View original CVE JSON
{
"id": "CVE-2026-6416",
"sourceIdentifier": "3938794e-25f5-4123-a1ba-5cbd7f104512",
"published": "2026-04-22T03:16:01.643",
"lastModified": "2026-10-26T21:10:00.170",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "Tanium addressed an uncontrolled resource consumption vulnerability in Interact."
},
{
"lang": "es",
"value": "Tanium abordó una vulnerabilidad de consumo de recursos no controlado en Interact."
}
],
"affected": [
{
"source": "3938794e-25f5-4123-a1ba-5cbd7f104512",
"affectedData": [
{
"vendor": "Tanium",
"product": "Interact",
"cpes": [
"cpe:2.3:a:tanium:service_interact:3.2.196:*:*:*:*:*:*:*",
"cpe:2.3:a:tanium:service_interact:3.5.102:*:*:*:*:*:*:*",
"cpe:2.3:a:tanium:service_interact:3.8.46:*:*:*:*:*:*:*"
],
"versions": [
{
"version": "3.2.0",
"lessThan": "3.2.202",
"versionType": "custom",
"status": "affected"
},
{
"version": "3.5.0",
"lessThan": "3.5.108",
"versionType": "custom",
"status": "affected"
},
{
"version": "3.8.0",
"lessThan": "3.8.47",
"versionType": "custom",
"status": "affected"
}
]
}
]
}
],
"metrics": {
"cvssMetricV31": [
{
"source": "3938794e-25f5-4123-a1ba-5cbd7f104512",
"type": "Secondary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:L",
"baseScore": 2.7,
"baseSeverity": "LOW",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "HIGH",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"availabilityImpact": "LOW"
},
"exploitabilityScore": 1.2,
"impactScore": 1.4
},
{
"source": "[email protected]",
"type": "Primary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H",
"baseScore": 4.9,
"baseSeverity": "MEDIUM",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "HIGH",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"availabilityImpact": "HIGH"
},
"exploitabilityScore": 1.2,
"impactScore": 3.6
}
],
"ssvcV203": [
{
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"ssvcData": {
"timestamp": "2026-04-22T12:57:48.199961Z",
"id": "CVE-2026-6416",
"options": [
{
"exploitation": "none"
},
{
"automatable": "no"
},
{
"technicalImpact": "partial"
}
],
"role": "CISA Coordinator",
"version": "2.0.3"
}
}
]
},
"weaknesses": [
{
"source": "3938794e-25f5-4123-a1ba-5cbd7f104512",
"type": "Secondary",
"description": [
{
"lang": "en",
"value": "CWE-400"
}
]
}
],
"configurations": [
{
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:a:tanium:interact:*:*:*:*:*:*:*:*",
"versionStartIncluding": "3.2.0",
"versionEndExcluding": "3.2.202",
"matchCriteriaId": "933FD5D0-DA5F-4CE1-A367-D2E3A2690C51"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:tanium:interact:*:*:*:*:*:*:*:*",
"versionStartIncluding": "3.5.0",
"versionEndExcluding": "3.5.108",
"matchCriteriaId": "230312E3-7CAF-4CC7-A2ED-AD43993955A9"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:tanium:interact:*:*:*:*:*:*:*:*",
"versionStartIncluding": "3.8.0",
"versionEndExcluding": "3.8.47",
"matchCriteriaId": "13988C7C-4A18-4490-B4B4-E65519A4E10C"
}
]
}
]
}
],
"references": [
{
"url": "https://security.tanium.com/TAN-2026-010",
"source": "3938794e-25f5-4123-a1ba-5cbd7f104512",
"tags": [
"Vendor Advisory"
]
}
]
}