Unauthorized Code Execution Vulnerability in Tanium Comply
CVE-2026-87021

7.2HIGH

Key Information:

Vendor

Tanium

Status
Comply
Vendor
CVE Published:
9 September 2026

What is CVE-2026-87021?

An unauthorized code execution vulnerability exists in Tanium Comply, allowing attackers to execute arbitrary code within the software. This security flaw poses significant risks for users, potentially compromising sensitive data and system integrity. Immediate updates and remediation steps are recommended to mitigate these vulnerabilities and protect organizational assets. For further details, refer to the official documentation provided by Tanium.

Affected Version(s)

Comply 2.32 < 2.32.252

Comply 2.35 < 2.35.306

Comply 2.37 < 2.37.308

References

https://security.tanium.com/TAN-2026-040

CVSS V3.1

Score:
7.2
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
High
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.