CVE-2026-87088: Tanium addressed an unauthorized code execution vulnerability in Enforce.

Q: What conditions are indicated for exploitation?

The CVSS vector indicates local access is required, no prior privileges are required, user interaction is required, and exploitation has high attack complexity.

Q: What is the potential security impact if exploitation succeeds?

The CVSS metrics rate confidentiality, integrity, and availability impact as high.

Published Sep 9, 2026

Updated

Tanium addressed an unauthorized code execution vulnerability in Enforce.

Affected Software

4 affected components

Tanium Enforce

Tanium Enforce>=2.9.0<2.9.718

Tanium Enforce>=2.10.0<2.10.760

Tanium Enforce>=3.0.0<3.0.346

Event History

Sep 9, 2026

CVE Published

via MITRE·02:00 AM

Data Sourced

via MITRE·02:00 AM

DescriptionSeverityWeakness

Data Sourced

via NVD·03:17 AM

DescriptionSeverityWeaknessAffected Software

Frequently Asked Questions

What conditions are indicated for exploitation?

The CVSS vector indicates local access is required, no prior privileges are required, user interaction is required, and exploitation has high attack complexity.

What is the potential security impact if exploitation succeeds?