CVE-2026-87023: Tanium addressed a path traversal vulnerability in Comply.
Published Sep 9, 2026
·Updated
Tanium addressed a path traversal vulnerability in Comply.
Affected Software
4 affected components
Tanium Comply
Tanium Comply>=2.32.0<2.32.252
Tanium Comply>=2.35.0<2.35.306
Tanium Comply>=2.37.0<2.37.308
Event History
Sep 9, 2026
CVE Published
via MITRE·02:09 AM
Data Sourced
via MITRE·02:09 AM
DescriptionSeverityWeakness
Data Sourced
via NVD·03:17 AM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What access does an attacker need to exploit this issue?
The CVSS vector indicates the vulnerable service must be reachable over a network and the attacker needs low-level privileges. No user interaction is required, and exploitation is rated as low complexity.
2
What is the likely security impact if exploitation succeeds?
The supplied CVSS data rates confidentiality impact as high and availability impact as low, with no integrity impact. The scope is marked changed, meaning the impact may extend beyond the vulnerable component's original security authority.
3
Do the provided details identify affected versions, fixed versions, or temporary mitigations?
No. The provided data identifies Tanium Comply and references Tanium advisory TAN-2026-028, but it does not list affected or remediated versions, configuration prerequisites, or compensating controls.