CVE-2026-87019: Tanium addressed an improper access controls vulnerability in Comply.

Q: What level of access does an attacker need to exploit this issue?

The CVSS vector indicates that an attacker needs low privileges. Exploitation does not require user interaction and can be performed over the network.

Q: What is the expected impact if this vulnerability is exploited?

The reported impact is limited to integrity, meaning an attacker may be able to modify information or perform unauthorized changes. No confidentiality or availability impact is indicated.

Published Sep 9, 2026

Updated

Tanium addressed an improper access controls vulnerability in Comply.

Affected Software

4 affected components

Tanium Comply

Tanium Comply>=2.32.0<2.32.252

Tanium Comply>=2.35.0<2.35.306

Tanium Comply>=2.37.0<2.37.308

Event History

Sep 9, 2026

CVE Published

via MITRE·02:06 AM

Data Sourced

via MITRE·02:06 AM

DescriptionSeverityWeakness

Data Sourced

via NVD·03:17 AM

DescriptionSeverityWeaknessAffected Software

Frequently Asked Questions

What level of access does an attacker need to exploit this issue?

The CVSS vector indicates that an attacker needs low privileges. Exploitation does not require user interaction and can be performed over the network.

What is the expected impact if this vulnerability is exploited?