CVE-2026-87037: Tanium addressed an improper access controls vulnerability in Comply.

Q: What access would an attacker need to exploit this issue?

The CVSS vector indicates that exploitation is network-accessible, requires low privileges, and does not require user interaction.

Q: What is the potential impact if exploitation succeeds?

The vulnerability is rated medium severity with a CVSS score of 5.4. The vector indicates low impact to confidentiality and integrity, with no availability impact.

Published Sep 9, 2026

Updated

Tanium addressed an improper access controls vulnerability in Comply.

Affected Software

4 affected components

Tanium Comply

Tanium Comply>=2.32.0<2.32.252

Tanium Comply>=2.35.0<2.35.306

Tanium Comply>=2.37.0<2.37.308

Event History

Sep 9, 2026

CVE Published

via MITRE·02:04 AM

Data Sourced

via MITRE·02:04 AM

DescriptionSeverityWeakness

Data Sourced

via NVD·03:17 AM

DescriptionSeverityWeaknessAffected Software

Frequently Asked Questions

What access would an attacker need to exploit this issue?

The CVSS vector indicates that exploitation is network-accessible, requires low privileges, and does not require user interaction.

What is the potential impact if exploitation succeeds?