CVE-2026-87033: Tanium addressed an improper access controls vulnerability in Comply.

Q: What level of access does an attacker need to exploit this issue?

The CVSS vector indicates that an attacker needs low-level privileges. Exploitation does not require user interaction and can be performed over the network.

Q: What is the potential impact if the vulnerability is exploited?

The reported impact is limited to integrity and availability. The CVSS vector indicates no confidentiality impact, with low impact to integrity and availability.

Published Sep 9, 2026

Updated

Tanium addressed an improper access controls vulnerability in Comply.

Affected Software

4 affected components

Tanium Comply

Tanium Comply>=2.32.0<2.32.252

Tanium Comply>=2.35.0<2.35.306

Tanium Comply>=2.37.0<2.37.308

Event History

Sep 9, 2026

CVE Published

via MITRE·02:08 AM

Data Sourced

via MITRE·02:08 AM

DescriptionSeverityWeakness

Data Sourced

via NVD·03:17 AM

DescriptionSeverityWeaknessAffected Software

Frequently Asked Questions

What level of access does an attacker need to exploit this issue?

The CVSS vector indicates that an attacker needs low-level privileges. Exploitation does not require user interaction and can be performed over the network.

What is the potential impact if the vulnerability is exploited?