CVE-2026-116647: Tanium addressed an improper output sanitization vulnerability in Comply.
Published Oct 27, 2026
·Updated
Tanium addressed an improper output sanitization vulnerability in Comply.
Affected Software
1 affected component
Tanium Comply
Event History
Oct 27, 2026
CVE Published
via MITRE·05:35 PM
Data Sourced
via MITRE·05:35 PM
DescriptionSeverityWeakness
Data Sourced
via NVD·06:17 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What would an attacker need to exploit this issue?
The CVSS vector indicates the issue is network-accessible, has low attack complexity, and does not require privileges. Exploitation requires user interaction.
2
What is the potential impact if exploitation succeeds?
The reported CVSS vector indicates low potential impact to confidentiality, integrity, and availability, with impact extending beyond the vulnerable component's security scope.