CVE-2026-87084: Tanium addressed a server-side request forgery vulnerability in Enforce.

Q: What access does an attacker need to exploit this issue?

The attack can be performed over the network by an attacker with low privileges. It does not require user interaction, and the attack complexity is rated low.

Q: What is the expected impact if exploitation succeeds?

The vulnerability is rated high severity with a 7.7 score. The reported impact is high confidentiality impact, with no reported integrity or availability impact.

Published Sep 9, 2026

Updated

Tanium addressed a server-side request forgery vulnerability in Enforce.

Affected Software

4 affected components

Tanium Enforce

Tanium Enforce>=2.9.0<2.9.718

Tanium Enforce>=2.10.0<2.10.760

Tanium Enforce>=3.0.0<3.0.346

Event History

Sep 9, 2026

CVE Published

via MITRE·02:08 AM

Data Sourced

via MITRE·02:08 AM

DescriptionSeverityWeakness

Data Sourced

via NVD·03:17 AM

DescriptionSeverityWeaknessAffected Software

Frequently Asked Questions

What access does an attacker need to exploit this issue?

The attack can be performed over the network by an attacker with low privileges. It does not require user interaction, and the attack complexity is rated low.

What is the expected impact if exploitation succeeds?