Unauthorized Code Execution Vulnerability in Tanium Enforce
CVE-2026-87088

7HIGH

Key Information:

Vendor

Tanium

Status
Enforce
Vendor
CVE Published:
9 September 2026

What is CVE-2026-87088?

Tanium has resolved an issue in Enforce that allowed unauthorized code execution. This vulnerability could be exploited to execute malicious code without proper authorization, presenting significant security risks to systems utilizing this software. Users are encouraged to apply the latest patches immediately to mitigate potential threats. For detailed information regarding the mitigation strategies, please refer to the Tanium security advisory.

Affected Version(s)

Enforce 2.9 < 2.9.718

Enforce 2.10 < 2.10.760

Enforce 3.0 < 3.0.346

References

https://security.tanium.com/TAN-2026-022

CVSS V3.1

Score:
7
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
High
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.