Improper Access Controls in Tanium Comply Vulnerability
CVE-2026-87047

6.3MEDIUM

Key Information:

Vendor

Tanium

Status
Comply
Vendor
CVE Published:
9 September 2026

What is CVE-2026-87047?

Tanium's Comply has been identified with an improper access controls vulnerability that could potentially allow unauthorized users to gain access to sensitive features or data. This security issue emphasizes the need for robust access control mechanisms to safeguard against unauthorized access.

Affected Version(s)

Comply 2.32 < 2.32.252

Comply 2.35 < 2.35.306

Comply 2.37 < 2.37.308

References

https://security.tanium.com/TAN-2026-038

CVSS V3.1

Score:
6.3
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.