Improper Output Sanitization in Tanium Comply
CVE-2026-116647

7.1HIGH

Key Information:

Vendor

Tanium

Status
Comply
Vendor
CVE Published:
27 October 2026

What is CVE-2026-116647?

An improper output sanitization vulnerability has been identified in Tanium's Comply product, which could allow attackers to manipulate output data in a manner inconsistent with the intended design. This risk may lead to unauthorized information disclosure or potentially exploit the system in unforeseen ways, emphasizing the importance of keeping the software updated and complying with security best practices.

Affected Version(s)

Comply 2.32 < 2.32.263

Comply 2.35 < 2.35.323

Comply 2.37 < 2.37.326

References

https://security.tanium.com/TAN-2026-069

CVSS V3.1

Score:
7.1
Severity:
HIGH
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.