CVE-2026-87023: Tanium addressed a path traversal vulnerability in Comply.
Published Sep 9, 2026
·Updated
Tanium addressed a path traversal vulnerability in Comply.
Affected Software
1 affected component
Tanium Comply
Event History
Sep 9, 2026
CVE Published
via MITRE·02:09 AM
Data Sourced
via MITRE·02:09 AM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What access does an attacker need to exploit this issue?
The CVSS vector indicates the vulnerable service must be reachable over a network and the attacker needs low-level privileges. No user interaction is required, and exploitation is rated as low complexity.
2
What is the likely security impact if exploitation succeeds?
The supplied CVSS data rates confidentiality impact as high and availability impact as low, with no integrity impact. The scope is marked changed, meaning the impact may extend beyond the vulnerable component's original security authority.
3
Do the provided details identify affected versions, fixed versions, or temporary mitigations?
No. The provided data identifies Tanium Comply and references Tanium advisory TAN-2026-028, but it does not list affected or remediated versions, configuration prerequisites, or compensating controls.