CVE-2026-9156 is a vulnerability in Tanium Server where resources are not properly released after their effective lifetime, potentially causing a denial of service condition. This flaw affects multiple versions of Tanium Server (7.6.4.0, 7.7.3.0, 7.8.2.0). The vulnerability has a CVSS 3.1 base score of 6.5 with network attack vector, low attack complexity, requiring low privileges and no user interaction, impacting confidentiality but not integrity or availability directly. The vendor has addressed the issue, but no explicit patch or remediation details are provided in the current data.

The vulnerability could allow an attacker with low privileges to cause a denial of service by exhausting resources on the Tanium Server due to failure to release resources after their effective lifetime. Confidentiality impact is rated high in the CVSS vector, but integrity and availability impacts are not indicated. There are no known active exploits in the wild.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since the vendor has addressed the vulnerability, it is recommended to monitor Tanium's official advisories for patches or updates. Until a patch is applied, limit access to the affected Tanium Server versions to trusted users with minimal privileges to reduce risk.