Improper Access Controls in Tanium Comply Product
CVE-2026-87075

8.1HIGH

Key Information:

Vendor

Tanium

Status
Comply
Vendor
CVE Published:
9 September 2026

What is CVE-2026-87075?

Tanium has identified a vulnerability within its Comply product that allows for improper access controls. This could potentially enable unauthorized users to gain access to sensitive functions or data, elevating their privileges beyond what was intended. Timely updates and remedial actions are essential to maintaining security integrity and protecting sensitive information from potential exploitation. For further details, refer to the security advisory TAN-2026-037.

Affected Version(s)

Comply 2.32 < 2.32.252

Comply 2.35 < 2.35.306

Comply 2.37 < 2.37.308

References

https://security.tanium.com/TAN-2026-037

CVSS V3.1

Score:
8.1
Severity:
HIGH
Confidentiality:
None
Integrity:
High
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.