Threat Intelligence Database

CVE-2026-87075 is a high-severity vulnerability in Tanium Comply involving improper access controls that could allow unauthorized actions. It affects specific versions 2.32, 2.35, and 2.37. The vulnerability has a CVSS score of 8.1, indicating a significant impact on integrity and availability. No official patch or remediation guidance has been provided yet by the vendor. There are no known exploits in the wild at this time.

CVE-2026-87073 is a medium severity vulnerability in Tanium Comply involving improper access controls that could allow unauthorized actions. It affects specific versions 2.32, 2.35, and 2.37. The vulnerability does not impact confidentiality or availability but can cause integrity issues. No official patch or remediation guidance is currently confirmed.

CVE-2026-87072 is a high-severity vulnerability in Tanium Comply involving missing authorization controls. The flaw allows users with limited privileges to access or perform actions beyond their authorization. The vulnerability affects specific versions 2.32, 2.35, and 2.37 of Tanium Comply. There is no explicit vendor advisory or patch information available at this time. The CVSS score is 7.1, indicating a significant confidentiality impact with limited integrity impact and no availability impact.

CVE-2026-87048 is a medium severity vulnerability in Tanium Comply involving improper access controls that could allow unauthorized actions. It affects specific versions 2.32, 2.35, and 2.37. There is no explicit vendor advisory or patch information available at this time.

CVE-2026-87047 is an authorization bypass vulnerability in Tanium Comply that involves improper access controls. It affects specific versions of the product and has a medium severity rating. The vulnerability allows a user with limited privileges to bypass authorization checks through a user-controlled key. No official patch or remediation guidance is currently confirmed from the vendor.

CVE-2026-87046 is an improper access control vulnerability in Tanium Comply that could allow users with limited privileges to perform unauthorized actions. The vulnerability has a medium severity rating with a CVSS score of 4.3. It affects specific versions 2.32, 2.35, and 2.37 of Tanium Comply. No official patch or remediation guidance is currently provided by the vendor. There are no known exploits in the wild at this time.

CVE-2026-87037 is a medium severity vulnerability in Tanium Comply involving improper access controls that could allow unauthorized actions. It affects specific versions 2.32, 2.35, and 2.37. The vulnerability has a CVSS score of 5.4, indicating a network attack vector with low complexity and requiring low privileges but no user interaction. No official patch or remediation level has been confirmed yet, and there are no known exploits in the wild.

CVE-2026-87036 is a high-severity vulnerability in Tanium Comply involving missing authorization controls that could allow an attacker with limited privileges to cause high impact on integrity and availability. The affected versions are 2.32, 2.35, and 2.37. No official patch or remediation guidance is currently provided by the vendor.

An information disclosure vulnerability was identified and addressed in Tanium Comply version 2.37. This flaw could allow an unauthorized actor with low privileges to gain access to sensitive information without user interaction. The vulnerability has a medium severity rating with a CVSS score of 4.3.

A SQL injection vulnerability was identified in Tanium Comply, affecting specific versions 2.32, 2.35, and 2.37. This vulnerability allows improper neutralization of special elements used in SQL commands, potentially leading to high impact on confidentiality, integrity, and availability. The vulnerability has a high CVSS score of 8.3, indicating a significant security risk. No official patch or remediation details are provided in the available data.