Improper Access Controls in Tanium Comply
CVE-2026-87072

7.1HIGH

Key Information:

Vendor

Tanium

Status
Comply
Vendor
CVE Published:
9 September 2026

What is CVE-2026-87072?

Tanium's Comply product has been found to have an improper access controls vulnerability that affects user permissions, potentially enabling unauthorized users to gain access to sensitive data and system functions. This compromise can lead to significant security risks if not addressed promptly. It is advisable for users to review their system configurations and apply necessary updates to ensure optimal protection against unauthorized access.

Affected Version(s)

Comply 2.32 < 2.32.252

Comply 2.35 < 2.35.306

Comply 2.37 < 2.37.308

References

https://security.tanium.com/TAN-2026-030

CVSS V3.1

Score:
7.1
Severity:
HIGH
Confidentiality:
High
Integrity:
Low
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.