CVE-2026-87034: Tanium addressed a SQL injection vulnerability in Comply.

Q: What does an attacker need to exploit this issue?

The vulnerability is network-accessible and does not require privileges, but exploitation has high attack complexity and requires user interaction.

Q: What could successful exploitation affect?

The published vector indicates high impact to confidentiality, integrity, and availability, with impact extending beyond the initially vulnerable security authority.

Published Sep 9, 2026

Updated

Tanium addressed a SQL injection vulnerability in Comply.

Affected Software

4 affected components

Tanium Comply

Tanium Comply>=2.32.0<2.32.252

Tanium Comply>=2.35.0<2.35.306

Tanium Comply>=2.37.0<2.37.308

Event History

Sep 9, 2026

CVE Published

via MITRE·02:08 AM

Data Sourced

via MITRE·02:08 AM

DescriptionSeverityWeakness

Data Sourced

via NVD·03:17 AM

DescriptionSeverityWeaknessAffected Software

Frequently Asked Questions

What does an attacker need to exploit this issue?

The vulnerability is network-accessible and does not require privileges, but exploitation has high attack complexity and requires user interaction.

What could successful exploitation affect?