CVE-2026-108302: Tanium addressed an improper access controls vulnerability in Comply.
Published Oct 27, 2026
·Updated
Tanium addressed an improper access controls vulnerability in Comply.
Affected Software
1 affected component
Tanium Comply
Event History
Oct 27, 2026
CVE Published
via MITRE·05:35 PM
Data Sourced
via MITRE·05:35 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What level of access does an attacker need to exploit this issue?
The vulnerability requires low-level privileges. It can be exploited remotely without user interaction, according to the supplied CVSS vector.
2
What is the likely impact if the issue is exploited?
The reported impact is limited to confidentiality. The supplied CVSS vector indicates low confidentiality impact and no integrity or availability impact.