CVE-2026-108301: Tanium addressed an improper access controls vulnerability in Comply.
Published Oct 27, 2026
·Updated
Tanium addressed an improper access controls vulnerability in Comply.
Affected Software
1 affected component
Tanium Comply
Event History
Oct 27, 2026
CVE Published
via MITRE·05:35 PM
Data Sourced
via MITRE·05:35 PM
DescriptionSeverityWeakness
Data Sourced
via NVD·06:17 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What level of access and attack conditions are required?
The vector indicates that exploitation is network-reachable but requires low privileges and high attack complexity. No user interaction is required.
2
What is the potential impact if exploitation succeeds?
The vulnerability can affect confidentiality, integrity, and availability at a low level, with impacts extending beyond the initially affected security authority.