Improper Access Controls Vulnerability in Tanium Comply
CVE-2026-87037

5.4MEDIUM

Key Information:

Vendor

Tanium

Status
Comply
Vendor
CVE Published:
9 September 2026

What is CVE-2026-87037?

The Tanium Comply product is susceptible to an improper access controls vulnerability that could potentially allow unauthorized users to gain elevated access to sensitive functions or data. This flaw, if exploited, may compromise the integrity of the security measures in place, leading to data exposure and operational risks. Users are encouraged to review their configurations and apply necessary patches as directed by vendor advisories to mitigate potential threats.

Affected Version(s)

Comply 2.32 < 2.32.252

Comply 2.35 < 2.35.306

Comply 2.37 < 2.37.308

References

https://security.tanium.com/TAN-2026-025

CVSS V3.1

Score:
5.4
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.