How severe is CVE-2026-15053?

CVE-2026-15053 has a CVSS 3.x base score of 7.5, rated high severity. It is exploitable over network with low attack complexity, requires no privileges and no user interaction. Impact on confidentiality is none, integrity none, and availability high.

Is CVE-2026-15053 being actively exploited?

It is not currently listed in CISA's Known Exploited Vulnerabilities catalog, and no EPSS exploit-prediction score is available yet.

How do I fix CVE-2026-15053?

Review the linked vendor and NVD advisories for patched versions and mitigations, then upgrade or apply the recommended workaround. Given its high severity, prioritise patching exposed systems.

When was CVE-2026-15053 published?

CVE-2026-15053 was published on 2026-07-08.

CVE-2026-15053

CVE-2026-15053 is a high-severity vulnerability with a CVSS 3.x base score of 7.5. The underlying weakness is classified as CWE-789.

Key facts

Severity: High (CVSS 3.x base score 7.5)
Actively exploited: Not listed in CISA KEV
Weakness: CWE-789
Published: 2026-07-08
Last modified: 2026-07-08

Description

Tanium addressed a denial of service vulnerability in Tanium Server.

Frequently asked questions

What is CVE-2026-15053?: Tanium addressed a denial of service vulnerability in Tanium Server.
How severe is CVE-2026-15053?: CVE-2026-15053 has a CVSS 3.x base score of 7.5, rated high severity. It is exploitable over network with low attack complexity, requires no privileges and no user interaction. Impact on confidentiality is none, integrity none, and availability high.
Is CVE-2026-15053 being actively exploited?: It is not currently listed in CISA's Known Exploited Vulnerabilities catalog, and no EPSS exploit-prediction score is available yet.
How do I fix CVE-2026-15053?: Review the linked vendor and NVD advisories for patched versions and mitigations, then upgrade or apply the recommended workaround. Given its high severity, prioritise patching exposed systems.
When was CVE-2026-15053 published?: CVE-2026-15053 was published on 2026-07-08.

References

https://security.tanium.com/TAN-2026-016

Other CWE-789 vulnerabilities

CVE-2021-34869 — High (CVSS 8.8): This vulnerability allows local attackers to escalate privileges on affected installations of Parallels Desktop…
CVE-2021-34868 — High (CVSS 8.8): This vulnerability allows local attackers to escalate privileges on affected installations of Parallels Desktop…
CVE-2024-20260 — High (CVSS 8.6): A vulnerability in the VPN and management web servers of the Cisco Adaptive Security Virtual Appliance (ASAv) and Cisco…
CVE-2021-34867 — High (CVSS 8.2): This vulnerability allows local attackers to escalate privileges on affected installations of Parallels Desktop…
CVE-2026-20048 — High (CVSS 7.7): A vulnerability in the Simple Network Management Protocol (SNMP) subsystem of Cisco Nexus 9000 Series Fabric Switches…
CVE-2026-55380 — High (CVSS 7.5): Pillow is a Python imaging library. Prior to 12.3.0, PIL/GdImageFile.py GdImageFile._open() read image dimensions from…

Browse all CWE-789 vulnerabilities →