CVE-2026-87021: Tanium addressed an unauthorized code execution vulnerability in Comply.

Q: What access does an attacker need to exploit this issue?

The attack vector is network-based and has low complexity, but the attacker must already hold high privileges. No user interaction is required.

Q: What could compromise of a vulnerable deployment allow?

The reported impact includes high confidentiality, integrity, and availability impact. Successful exploitation could therefore expose data, alter systems or data, and disrupt service availability.

Published Sep 9, 2026

Updated

Tanium addressed an unauthorized code execution vulnerability in Comply.

Affected Software

4 affected components

Tanium Comply

Tanium Comply>=2.32.0<2.32.252

Tanium Comply>=2.35.0<2.35.306

Tanium Comply>=2.37.0<2.37.308

Event History

Sep 9, 2026

CVE Published

via MITRE·02:09 AM

Data Sourced

via MITRE·02:09 AM

DescriptionSeverityWeakness

Data Sourced

via NVD·03:17 AM

DescriptionSeverityWeaknessAffected Software

Frequently Asked Questions

What access does an attacker need to exploit this issue?

The attack vector is network-based and has low complexity, but the attacker must already hold high privileges. No user interaction is required.

What could compromise of a vulnerable deployment allow?