Search
Find a vulnerability
Search criteria
ⓘ
Use this form to refine search results.
Full-text search supports keyword queries with ranking and filtering.
You can combine vendor, product, and sources to narrow results.
Enable “Apply ordering” to sort by date instead of relevance.
86 vulnerabilities
CVE-2026-87026 (GCVE-0-2026-87026)
Vulnerability from cvelistv5 – Published: 2026-09-16 19:43 – Updated: 2026-09-16 19:43
VLAI
EPSS
VEX
Title
Tanium addressed an improper access controls vulnerability in Threat Response.
Summary
Tanium addressed an improper access controls vulnerability in Threat Response.
Severity
CWE
- CWE-862 - Missing Authorization
Assigner
References
1 reference
Impacted products
1 product
| Vendor | Product | Version | |
|---|---|---|---|
| Tanium | Threat Response |
Affected:
4.9 , < 4.9.454
(custom)
Affected: 4.12 , < 4.12.324 (custom) Affected: 4.17 , < 4.17.292 (custom) |
Date Public
2026-09-16 19:42
{
"containers": {
"cna": {
"affected": [
{
"product": "Threat Response",
"vendor": "Tanium",
"versions": [
{
"lessThan": "4.9.454",
"status": "affected",
"version": "4.9",
"versionType": "custom"
},
{
"lessThan": "4.12.324",
"status": "affected",
"version": "4.12",
"versionType": "custom"
},
{
"lessThan": "4.17.292",
"status": "affected",
"version": "4.17",
"versionType": "custom"
}
]
}
],
"dateAssigned": "2026-09-08T18:00:45.818Z",
"datePublic": "2026-09-16T19:42:49.524Z",
"descriptions": [
{
"lang": "en",
"value": "Tanium addressed an improper access controls vulnerability in Threat Response."
}
],
"metrics": [
{
"cvssV3_1": {
"baseScore": 3.8,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:N",
"version": "3.1"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-862",
"description": "Missing Authorization",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-09-16T19:43:03.949Z",
"orgId": "3938794e-25f5-4123-a1ba-5cbd7f104512",
"shortName": "Tanium"
},
"references": [
{
"name": "TAN-2026-034",
"url": "https://security.tanium.com/TAN-2026-034"
}
],
"title": "Tanium addressed an improper access controls vulnerability in Threat Response."
}
},
"cveMetadata": {
"assignerOrgId": "3938794e-25f5-4123-a1ba-5cbd7f104512",
"assignerShortName": "Tanium",
"cveId": "CVE-2026-87026",
"datePublished": "2026-09-16T19:43:03.949Z",
"dateReserved": "2026-09-08T18:00:46.024Z",
"dateUpdated": "2026-09-16T19:43:03.949Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-87113 (GCVE-0-2026-87113)
Vulnerability from cvelistv5 – Published: 2026-09-16 19:42 – Updated: 2026-09-16 20:30
VLAI
EPSS
VEX
Title
Tanium addressed an improper access controls vulnerability in Threat Response.
Summary
Tanium addressed an improper access controls vulnerability in Threat Response.
Severity
6.3 (Medium)
CWE
- CWE-639 - Authorization Bypass Through User-Controlled Key
Assigner
References
1 reference
Impacted products
1 product
| Vendor | Product | Version | |
|---|---|---|---|
| Tanium | Threat Response |
Affected:
4.9 , < 4.9.449
(custom)
Affected: 4.12 , < 4.12.319 (custom) Affected: 4.17 , < 4.17.291 (custom) |
Date Public
2026-09-16 19:42
{
"containers": {
"cna": {
"affected": [
{
"product": "Threat Response",
"vendor": "Tanium",
"versions": [
{
"lessThan": "4.9.449",
"status": "affected",
"version": "4.9",
"versionType": "custom"
},
{
"lessThan": "4.12.319",
"status": "affected",
"version": "4.12",
"versionType": "custom"
},
{
"lessThan": "4.17.291",
"status": "affected",
"version": "4.17",
"versionType": "custom"
}
]
}
],
"dateAssigned": "2026-09-08T20:39:21.462Z",
"datePublic": "2026-09-16T19:42:32.588Z",
"descriptions": [
{
"lang": "en",
"value": "Tanium addressed an improper access controls vulnerability in Threat Response."
}
],
"metrics": [
{
"cvssV3_1": {
"baseScore": 6.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
"version": "3.1"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-639",
"description": "Authorization Bypass Through User-Controlled Key",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-09-16T20:30:08.540Z",
"orgId": "3938794e-25f5-4123-a1ba-5cbd7f104512",
"shortName": "Tanium"
},
"references": [
{
"name": "TAN-2026-048",
"url": "https://security.tanium.com/TAN-2026-048"
}
],
"title": "Tanium addressed an improper access controls vulnerability in Threat Response."
}
},
"cveMetadata": {
"assignerOrgId": "3938794e-25f5-4123-a1ba-5cbd7f104512",
"assignerShortName": "Tanium",
"cveId": "CVE-2026-87113",
"datePublished": "2026-09-16T19:42:46.501Z",
"dateReserved": "2026-09-08T20:39:21.860Z",
"dateUpdated": "2026-09-16T20:30:08.540Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-87105 (GCVE-0-2026-87105)
Vulnerability from cvelistv5 – Published: 2026-09-16 19:42 – Updated: 2026-09-16 19:42
VLAI
EPSS
VEX
Title
Tanium addressed a SQL injection vulnerability in Threat Response.
Summary
Tanium addressed a SQL injection vulnerability in Threat Response.
Severity
8.8 (High)
CWE
- CWE-89 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
Assigner
References
1 reference
Impacted products
1 product
| Vendor | Product | Version | |
|---|---|---|---|
| Tanium | Threat Response |
Affected:
4.9 , < 4.9.447
(custom)
Affected: 4.12 , < 4.12.317 (custom) Affected: 4.17 , < 4.17.289 (custom) |
Date Public
2026-09-16 19:42
{
"containers": {
"cna": {
"affected": [
{
"product": "Threat Response",
"vendor": "Tanium",
"versions": [
{
"lessThan": "4.9.447",
"status": "affected",
"version": "4.9",
"versionType": "custom"
},
{
"lessThan": "4.12.317",
"status": "affected",
"version": "4.12",
"versionType": "custom"
},
{
"lessThan": "4.17.289",
"status": "affected",
"version": "4.17",
"versionType": "custom"
}
]
}
],
"dateAssigned": "2026-09-08T20:12:41.542Z",
"datePublic": "2026-09-16T19:42:08.010Z",
"descriptions": [
{
"lang": "en",
"value": "Tanium addressed a SQL injection vulnerability in Threat Response."
}
],
"metrics": [
{
"cvssV3_1": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-89",
"description": "Improper Neutralization of Special Elements used in an SQL Command (\u0027SQL Injection\u0027)",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-09-16T19:42:22.229Z",
"orgId": "3938794e-25f5-4123-a1ba-5cbd7f104512",
"shortName": "Tanium"
},
"references": [
{
"name": "TAN-2026-047",
"url": "https://security.tanium.com/TAN-2026-047"
}
],
"title": "Tanium addressed a SQL injection vulnerability in Threat Response."
}
},
"cveMetadata": {
"assignerOrgId": "3938794e-25f5-4123-a1ba-5cbd7f104512",
"assignerShortName": "Tanium",
"cveId": "CVE-2026-87105",
"datePublished": "2026-09-16T19:42:22.229Z",
"dateReserved": "2026-09-08T20:12:42.037Z",
"dateUpdated": "2026-09-16T19:42:22.229Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-87116 (GCVE-0-2026-87116)
Vulnerability from cvelistv5 – Published: 2026-09-16 19:41 – Updated: 2026-09-16 19:41
VLAI
EPSS
VEX
Title
Tanium addressed a server-side request forgery vulnerability in Threat Response.
Summary
Tanium addressed a server-side request forgery vulnerability in Threat Response.
Severity
6.5 (Medium)
CWE
- CWE-918 - Server-Side Request Forgery (SSRF)
Assigner
References
1 reference
Impacted products
1 product
| Vendor | Product | Version | |
|---|---|---|---|
| Tanium | Threat Response |
Affected:
4.9 , < 4.9.454
(custom)
Affected: 4.12 , < 4.12.324 (custom) Affected: 4.17 , < 4.17.292 (custom) |
Date Public
2026-09-16 19:41
{
"containers": {
"cna": {
"affected": [
{
"product": "Threat Response",
"vendor": "Tanium",
"versions": [
{
"lessThan": "4.9.454",
"status": "affected",
"version": "4.9",
"versionType": "custom"
},
{
"lessThan": "4.12.324",
"status": "affected",
"version": "4.12",
"versionType": "custom"
},
{
"lessThan": "4.17.292",
"status": "affected",
"version": "4.17",
"versionType": "custom"
}
]
}
],
"dateAssigned": "2026-09-08T20:57:43.040Z",
"datePublic": "2026-09-16T19:41:43.967Z",
"descriptions": [
{
"lang": "en",
"value": "Tanium addressed a server-side request forgery vulnerability in Threat Response."
}
],
"metrics": [
{
"cvssV3_1": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
"version": "3.1"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-918",
"description": "Server-Side Request Forgery (SSRF)",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-09-16T19:41:57.946Z",
"orgId": "3938794e-25f5-4123-a1ba-5cbd7f104512",
"shortName": "Tanium"
},
"references": [
{
"name": "TAN-2026-050",
"url": "https://security.tanium.com/TAN-2026-050"
}
],
"title": "Tanium addressed a server-side request forgery vulnerability in Threat Response."
}
},
"cveMetadata": {
"assignerOrgId": "3938794e-25f5-4123-a1ba-5cbd7f104512",
"assignerShortName": "Tanium",
"cveId": "CVE-2026-87116",
"datePublished": "2026-09-16T19:41:57.946Z",
"dateReserved": "2026-09-08T20:57:43.536Z",
"dateUpdated": "2026-09-16T19:41:57.946Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-87024 (GCVE-0-2026-87024)
Vulnerability from cvelistv5 – Published: 2026-09-16 19:41 – Updated: 2026-09-16 20:20
VLAI
EPSS
VEX
Title
Tanium addressed a SQL injection vulnerability in Asset.
Summary
Tanium addressed a SQL injection vulnerability in Asset.
Severity
7.2 (High)
CWE
- CWE-89 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
Assigner
References
1 reference
Impacted products
Date Public
2026-09-16 19:41
{
"containers": {
"cna": {
"affected": [
{
"product": "Asset",
"vendor": "Tanium",
"versions": [
{
"lessThan": "1.33.326",
"status": "affected",
"version": "1.33",
"versionType": "custom"
},
{
"lessThan": "1.36.174",
"status": "affected",
"version": "1.36",
"versionType": "custom"
},
{
"lessThan": "1.39.153",
"status": "affected",
"version": "1.39",
"versionType": "custom"
}
]
}
],
"dateAssigned": "2026-09-08T17:48:37.901Z",
"datePublic": "2026-09-16T19:41:13.197Z",
"descriptions": [
{
"lang": "en",
"value": "Tanium addressed a SQL injection vulnerability in Asset."
}
],
"metrics": [
{
"cvssV3_1": {
"baseScore": 7.2,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-89",
"description": "Improper Neutralization of Special Elements used in an SQL Command (\u0027SQL Injection\u0027)",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-09-16T20:20:20.542Z",
"orgId": "3938794e-25f5-4123-a1ba-5cbd7f104512",
"shortName": "Tanium"
},
"references": [
{
"name": "TAN-2026-046",
"url": "https://security.tanium.com/TAN-2026-046"
}
],
"title": "Tanium addressed a SQL injection vulnerability in Asset."
}
},
"cveMetadata": {
"assignerOrgId": "3938794e-25f5-4123-a1ba-5cbd7f104512",
"assignerShortName": "Tanium",
"cveId": "CVE-2026-87024",
"datePublished": "2026-09-16T19:41:40.914Z",
"dateReserved": "2026-09-08T17:48:38.364Z",
"dateUpdated": "2026-09-16T20:20:20.542Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-87076 (GCVE-0-2026-87076)
Vulnerability from cvelistv5 – Published: 2026-09-16 19:41 – Updated: 2026-09-16 19:41
VLAI
EPSS
VEX
Title
Tanium addressed an information disclosure vulnerability in Discover.
Summary
Tanium addressed an information disclosure vulnerability in Discover.
Severity
6.5 (Medium)
CWE
- CWE-200 - Exposure of Sensitive Information to an Unauthorized Actor
Assigner
References
1 reference
Impacted products
Date Public
2026-09-16 19:40
{
"containers": {
"cna": {
"affected": [
{
"product": "Discover",
"vendor": "Tanium",
"versions": [
{
"lessThan": "4.10.190",
"status": "affected",
"version": "4.10",
"versionType": "custom"
},
{
"lessThan": "4.15.198",
"status": "affected",
"version": "4.15",
"versionType": "custom"
},
{
"lessThan": "4.19.114",
"status": "affected",
"version": "4.19",
"versionType": "custom"
}
]
}
],
"dateAssigned": "2026-09-08T19:20:26.988Z",
"datePublic": "2026-09-16T19:40:56.123Z",
"descriptions": [
{
"lang": "en",
"value": "Tanium addressed an information disclosure vulnerability in Discover."
}
],
"metrics": [
{
"cvssV3_1": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
"version": "3.1"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-200",
"description": "Exposure of Sensitive Information to an Unauthorized Actor",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-09-16T19:41:26.466Z",
"orgId": "3938794e-25f5-4123-a1ba-5cbd7f104512",
"shortName": "Tanium"
},
"references": [
{
"name": "TAN-2026-024",
"url": "https://security.tanium.com/TAN-2026-024"
}
],
"title": "Tanium addressed an information disclosure vulnerability in Discover."
}
},
"cveMetadata": {
"assignerOrgId": "3938794e-25f5-4123-a1ba-5cbd7f104512",
"assignerShortName": "Tanium",
"cveId": "CVE-2026-87076",
"datePublished": "2026-09-16T19:41:26.466Z",
"dateReserved": "2026-09-08T19:20:27.480Z",
"dateUpdated": "2026-09-16T19:41:26.466Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-86865 (GCVE-0-2026-86865)
Vulnerability from cvelistv5 – Published: 2026-09-16 19:41 – Updated: 2026-09-16 19:41
VLAI
EPSS
VEX
Title
Tanium addressed a SQL injection vulnerability in Asset.
Summary
Tanium addressed a SQL injection vulnerability in Asset.
Severity
8.8 (High)
CWE
- CWE-89 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
Assigner
References
1 reference
Impacted products
Date Public
2026-09-16 19:41
{
"containers": {
"cna": {
"affected": [
{
"product": "Asset",
"vendor": "Tanium",
"versions": [
{
"lessThan": "1.33.326",
"status": "affected",
"version": "1.33",
"versionType": "custom"
},
{
"lessThan": "1.36.174",
"status": "affected",
"version": "1.36",
"versionType": "custom"
},
{
"lessThan": "1.39.153",
"status": "affected",
"version": "1.39",
"versionType": "custom"
}
]
}
],
"dateAssigned": "2026-09-08T15:47:56.414Z",
"datePublic": "2026-09-16T19:41:06.931Z",
"descriptions": [
{
"lang": "en",
"value": "Tanium addressed a SQL injection vulnerability in Asset."
}
],
"metrics": [
{
"cvssV3_1": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-89",
"description": "Improper Neutralization of Special Elements used in an SQL Command (\u0027SQL Injection\u0027)",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-09-16T19:41:26.277Z",
"orgId": "3938794e-25f5-4123-a1ba-5cbd7f104512",
"shortName": "Tanium"
},
"references": [
{
"name": "TAN-2026-049",
"url": "https://security.tanium.com/TAN-2026-049"
}
],
"title": "Tanium addressed a SQL injection vulnerability in Asset."
}
},
"cveMetadata": {
"assignerOrgId": "3938794e-25f5-4123-a1ba-5cbd7f104512",
"assignerShortName": "Tanium",
"cveId": "CVE-2026-86865",
"datePublished": "2026-09-16T19:41:26.277Z",
"dateReserved": "2026-09-08T15:47:56.959Z",
"dateUpdated": "2026-09-16T19:41:26.277Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-87036 (GCVE-0-2026-87036)
Vulnerability from cvelistv5 – Published: 2026-09-09 02:09 – Updated: 2026-09-09 16:10
VLAI
EPSS
VEX
Title
Tanium addressed an improper access controls vulnerability in Comply.
Summary
Tanium addressed an improper access controls vulnerability in Comply.
Severity
8.1 (High)
SSVC
Exploitation: none
Automatable: no
Technical Impact: partial
CISA Coordinator · CISA-ADP (v2.0.3)
Decision recorded 2026-09-09 15:57 UTC
CWE
- CWE-862 - Missing Authorization
Assigner
References
1 reference
Impacted products
Date Public
2026-09-09 02:04
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2026-87036",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-09-09T15:57:16.030182Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2026-09-09T16:10:29.171Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"product": "Comply",
"vendor": "Tanium",
"versions": [
{
"lessThan": "2.32.252",
"status": "affected",
"version": "2.32",
"versionType": "custom"
},
{
"lessThan": "2.35.306",
"status": "affected",
"version": "2.35",
"versionType": "custom"
},
{
"lessThan": "2.37.308",
"status": "affected",
"version": "2.37",
"versionType": "custom"
}
]
}
],
"dateAssigned": "2026-09-08T18:32:06.650Z",
"datePublic": "2026-09-09T02:04:27.792Z",
"descriptions": [
{
"lang": "en",
"value": "Tanium addressed an improper access controls vulnerability in Comply."
}
],
"metrics": [
{
"cvssV3_1": {
"baseScore": 8.1,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H",
"version": "3.1"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-862",
"description": "Missing Authorization",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-09-09T02:09:04.289Z",
"orgId": "3938794e-25f5-4123-a1ba-5cbd7f104512",
"shortName": "Tanium"
},
"references": [
{
"name": "TAN-2026-041",
"url": "https://security.tanium.com/TAN-2026-041"
}
],
"title": "Tanium addressed an improper access controls vulnerability in Comply."
}
},
"cveMetadata": {
"assignerOrgId": "3938794e-25f5-4123-a1ba-5cbd7f104512",
"assignerShortName": "Tanium",
"cveId": "CVE-2026-87036",
"datePublished": "2026-09-09T02:09:04.289Z",
"dateReserved": "2026-09-08T18:32:07.122Z",
"dateUpdated": "2026-09-09T16:10:29.171Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-87021 (GCVE-0-2026-87021)
Vulnerability from cvelistv5 – Published: 2026-09-09 02:09 – Updated: 2026-09-09 16:10
VLAI
EPSS
VEX
Title
Tanium addressed an unauthorized code execution vulnerability in Comply.
Summary
Tanium addressed an unauthorized code execution vulnerability in Comply.
Severity
7.2 (High)
SSVC
Exploitation: none
Automatable: no
Technical Impact: total
CISA Coordinator · CISA-ADP (v2.0.3)
Decision recorded 2026-09-09 15:57 UTC
CWE
- CWE-1336 - Improper Neutralization of Special Elements Used in a Template Engine
Assigner
References
1 reference
Impacted products
Date Public
2026-09-09 02:04
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2026-87021",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "total"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-09-09T15:57:27.183363Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2026-09-09T16:10:29.335Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"product": "Comply",
"vendor": "Tanium",
"versions": [
{
"lessThan": "2.32.252",
"status": "affected",
"version": "2.32",
"versionType": "custom"
},
{
"lessThan": "2.35.306",
"status": "affected",
"version": "2.35",
"versionType": "custom"
},
{
"lessThan": "2.37.308",
"status": "affected",
"version": "2.37",
"versionType": "custom"
}
]
}
],
"dateAssigned": "2026-09-08T17:16:31.258Z",
"datePublic": "2026-09-09T02:04:27.245Z",
"descriptions": [
{
"lang": "en",
"value": "Tanium addressed an unauthorized code execution vulnerability in Comply."
}
],
"metrics": [
{
"cvssV3_1": {
"baseScore": 7.2,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-1336",
"description": "Improper Neutralization of Special Elements Used in a Template Engine",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-09-09T02:09:04.035Z",
"orgId": "3938794e-25f5-4123-a1ba-5cbd7f104512",
"shortName": "Tanium"
},
"references": [
{
"name": "TAN-2026-040",
"url": "https://security.tanium.com/TAN-2026-040"
}
],
"title": "Tanium addressed an unauthorized code execution vulnerability in Comply."
}
},
"cveMetadata": {
"assignerOrgId": "3938794e-25f5-4123-a1ba-5cbd7f104512",
"assignerShortName": "Tanium",
"cveId": "CVE-2026-87021",
"datePublished": "2026-09-09T02:09:04.035Z",
"dateReserved": "2026-09-08T17:16:31.762Z",
"dateUpdated": "2026-09-09T16:10:29.335Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-87023 (GCVE-0-2026-87023)
Vulnerability from cvelistv5 – Published: 2026-09-09 02:09 – Updated: 2026-09-09 16:10
VLAI
EPSS
VEX
Title
Tanium addressed a path traversal vulnerability in Comply.
Summary
Tanium addressed a path traversal vulnerability in Comply.
Severity
8.5 (High)
SSVC
Exploitation: none
Automatable: no
Technical Impact: partial
CISA Coordinator · CISA-ADP (v2.0.3)
Decision recorded 2026-09-09 15:57 UTC
CWE
- CWE-22 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
Assigner
References
1 reference
Impacted products
Date Public
2026-09-09 02:04
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2026-87023",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-09-09T15:57:50.698878Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2026-09-09T16:10:29.482Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"product": "Comply",
"vendor": "Tanium",
"versions": [
{
"lessThan": "2.32.252",
"status": "affected",
"version": "2.32",
"versionType": "custom"
},
{
"lessThan": "2.35.306",
"status": "affected",
"version": "2.35",
"versionType": "custom"
},
{
"lessThan": "2.37.308",
"status": "affected",
"version": "2.37",
"versionType": "custom"
}
]
}
],
"dateAssigned": "2026-09-08T17:42:29.799Z",
"datePublic": "2026-09-09T02:04:22.472Z",
"descriptions": [
{
"lang": "en",
"value": "Tanium addressed a path traversal vulnerability in Comply."
}
],
"metrics": [
{
"cvssV3_1": {
"baseScore": 8.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:L",
"version": "3.1"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-22",
"description": "Improper Limitation of a Pathname to a Restricted Directory (\u0027Path Traversal\u0027)",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-09-09T02:09:03.830Z",
"orgId": "3938794e-25f5-4123-a1ba-5cbd7f104512",
"shortName": "Tanium"
},
"references": [
{
"name": "TAN-2026-028",
"url": "https://security.tanium.com/TAN-2026-028"
}
],
"title": "Tanium addressed a path traversal vulnerability in Comply."
}
},
"cveMetadata": {
"assignerOrgId": "3938794e-25f5-4123-a1ba-5cbd7f104512",
"assignerShortName": "Tanium",
"cveId": "CVE-2026-87023",
"datePublished": "2026-09-09T02:09:03.830Z",
"dateReserved": "2026-09-08T17:42:30.300Z",
"dateUpdated": "2026-09-09T16:10:29.482Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-87084 (GCVE-0-2026-87084)
Vulnerability from cvelistv5 – Published: 2026-09-09 02:08 – Updated: 2026-09-09 16:10
VLAI
EPSS
VEX
Title
Tanium addressed a server-side request forgery vulnerability in Enforce.
Summary
Tanium addressed a server-side request forgery vulnerability in Enforce.
Severity
7.7 (High)
SSVC
Exploitation: none
Automatable: no
Technical Impact: partial
CISA Coordinator · CISA-ADP (v2.0.3)
Decision recorded 2026-09-09 15:57 UTC
CWE
- CWE-918 - Server-Side Request Forgery (SSRF)
Assigner
References
1 reference
Impacted products
Date Public
2026-09-09 02:04
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2026-87084",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-09-09T15:57:37.860023Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2026-09-09T16:10:29.632Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"product": "Enforce",
"vendor": "Tanium",
"versions": [
{
"lessThan": "2.9.718",
"status": "affected",
"version": "2.9",
"versionType": "custom"
},
{
"lessThan": "2.10.760",
"status": "affected",
"version": "2.10",
"versionType": "custom"
},
{
"lessThan": "3.0.346",
"status": "affected",
"version": "3.0",
"versionType": "custom"
}
]
}
],
"dateAssigned": "2026-09-08T19:30:16.703Z",
"datePublic": "2026-09-09T02:04:25.434Z",
"descriptions": [
{
"lang": "en",
"value": "Tanium addressed a server-side request forgery vulnerability in Enforce."
}
],
"metrics": [
{
"cvssV3_1": {
"baseScore": 7.7,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N",
"version": "3.1"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-918",
"description": "Server-Side Request Forgery (SSRF)",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-09-09T02:08:35.969Z",
"orgId": "3938794e-25f5-4123-a1ba-5cbd7f104512",
"shortName": "Tanium"
},
"references": [
{
"name": "TAN-2026-036",
"url": "https://security.tanium.com/TAN-2026-036"
}
],
"title": "Tanium addressed a server-side request forgery vulnerability in Enforce."
}
},
"cveMetadata": {
"assignerOrgId": "3938794e-25f5-4123-a1ba-5cbd7f104512",
"assignerShortName": "Tanium",
"cveId": "CVE-2026-87084",
"datePublished": "2026-09-09T02:08:35.969Z",
"dateReserved": "2026-09-08T19:30:17.199Z",
"dateUpdated": "2026-09-09T16:10:29.632Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-87048 (GCVE-0-2026-87048)
Vulnerability from cvelistv5 – Published: 2026-09-09 02:08 – Updated: 2026-09-09 16:10
VLAI
EPSS
VEX
Title
Tanium addressed an improper access controls vulnerability in Comply.
Summary
Tanium addressed an improper access controls vulnerability in Comply.
Severity
5.4 (Medium)
SSVC
Exploitation: none
Automatable: no
Technical Impact: partial
CISA Coordinator · CISA-ADP (v2.0.3)
Decision recorded 2026-09-09 15:57 UTC
CWE
- CWE-862 - Missing Authorization
Assigner
References
1 reference
Impacted products
Date Public
2026-09-09 02:04
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2026-87048",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-09-09T15:57:58.517620Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2026-09-09T16:10:29.781Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"product": "Comply",
"vendor": "Tanium",
"versions": [
{
"lessThan": "2.32.252",
"status": "affected",
"version": "2.32",
"versionType": "custom"
},
{
"lessThan": "2.35.306",
"status": "affected",
"version": "2.35",
"versionType": "custom"
},
{
"lessThan": "2.37.308",
"status": "affected",
"version": "2.37",
"versionType": "custom"
}
]
}
],
"dateAssigned": "2026-09-08T18:52:45.359Z",
"datePublic": "2026-09-09T02:04:22.065Z",
"descriptions": [
{
"lang": "en",
"value": "Tanium addressed an improper access controls vulnerability in Comply."
}
],
"metrics": [
{
"cvssV3_1": {
"baseScore": 5.4,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L",
"version": "3.1"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-862",
"description": "Missing Authorization",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-09-09T02:08:35.770Z",
"orgId": "3938794e-25f5-4123-a1ba-5cbd7f104512",
"shortName": "Tanium"
},
"references": [
{
"name": "TAN-2026-027",
"url": "https://security.tanium.com/TAN-2026-027"
}
],
"title": "Tanium addressed an improper access controls vulnerability in Comply."
}
},
"cveMetadata": {
"assignerOrgId": "3938794e-25f5-4123-a1ba-5cbd7f104512",
"assignerShortName": "Tanium",
"cveId": "CVE-2026-87048",
"datePublished": "2026-09-09T02:08:35.770Z",
"dateReserved": "2026-09-08T18:52:45.827Z",
"dateUpdated": "2026-09-09T16:10:29.781Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-87034 (GCVE-0-2026-87034)
Vulnerability from cvelistv5 – Published: 2026-09-09 02:08 – Updated: 2026-09-09 16:10
VLAI
EPSS
VEX
Title
Tanium addressed a SQL injection vulnerability in Comply.
Summary
Tanium addressed a SQL injection vulnerability in Comply.
Severity
8.3 (High)
SSVC
Exploitation: none
Automatable: no
Technical Impact: total
CISA Coordinator · CISA-ADP (v2.0.3)
Decision recorded 2026-09-09 15:58 UTC
CWE
- CWE-89 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
Assigner
References
1 reference
Impacted products
Date Public
2026-09-09 02:04
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2026-87034",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "total"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-09-09T15:58:23.093329Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2026-09-09T16:10:29.924Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"product": "Comply",
"vendor": "Tanium",
"versions": [
{
"lessThan": "2.32.252",
"status": "affected",
"version": "2.32",
"versionType": "custom"
},
{
"lessThan": "2.35.306",
"status": "affected",
"version": "2.35",
"versionType": "custom"
},
{
"lessThan": "2.37.308",
"status": "affected",
"version": "2.37",
"versionType": "custom"
}
]
}
],
"dateAssigned": "2026-09-08T18:28:45.497Z",
"datePublic": "2026-09-09T02:04:28.299Z",
"descriptions": [
{
"lang": "en",
"value": "Tanium addressed a SQL injection vulnerability in Comply."
}
],
"metrics": [
{
"cvssV3_1": {
"baseScore": 8.3,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H",
"version": "3.1"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-89",
"description": "Improper Neutralization of Special Elements used in an SQL Command (\u0027SQL Injection\u0027)",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-09-09T02:08:35.558Z",
"orgId": "3938794e-25f5-4123-a1ba-5cbd7f104512",
"shortName": "Tanium"
},
"references": [
{
"name": "TAN-2026-042",
"url": "https://security.tanium.com/TAN-2026-042"
}
],
"title": "Tanium addressed a SQL injection vulnerability in Comply."
}
},
"cveMetadata": {
"assignerOrgId": "3938794e-25f5-4123-a1ba-5cbd7f104512",
"assignerShortName": "Tanium",
"cveId": "CVE-2026-87034",
"datePublished": "2026-09-09T02:08:35.558Z",
"dateReserved": "2026-09-08T18:28:45.935Z",
"dateUpdated": "2026-09-09T16:10:29.924Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-87073 (GCVE-0-2026-87073)
Vulnerability from cvelistv5 – Published: 2026-09-09 02:08 – Updated: 2026-09-09 16:10
VLAI
EPSS
VEX
Title
Tanium addressed an improper access controls vulnerability in Comply.
Summary
Tanium addressed an improper access controls vulnerability in Comply.
Severity
6.5 (Medium)
SSVC
Exploitation: none
Automatable: no
Technical Impact: partial
CISA Coordinator · CISA-ADP (v2.0.3)
Decision recorded 2026-09-09 15:58 UTC
CWE
- CWE-862 - Missing Authorization
Assigner
References
1 reference
Impacted products
Date Public
2026-09-09 02:04
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2026-87073",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-09-09T15:58:49.002875Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2026-09-09T16:10:30.085Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"product": "Comply",
"vendor": "Tanium",
"versions": [
{
"lessThan": "2.32.252",
"status": "affected",
"version": "2.32",
"versionType": "custom"
},
{
"lessThan": "2.35.306",
"status": "affected",
"version": "2.35",
"versionType": "custom"
},
{
"lessThan": "2.37.308",
"status": "affected",
"version": "2.37",
"versionType": "custom"
}
]
}
],
"dateAssigned": "2026-09-08T19:05:34.723Z",
"datePublic": "2026-09-09T02:04:22.858Z",
"descriptions": [
{
"lang": "en",
"value": "Tanium addressed an improper access controls vulnerability in Comply."
}
],
"metrics": [
{
"cvssV3_1": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N",
"version": "3.1"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-862",
"description": "Missing Authorization",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-09-09T02:08:35.359Z",
"orgId": "3938794e-25f5-4123-a1ba-5cbd7f104512",
"shortName": "Tanium"
},
"references": [
{
"name": "TAN-2026-029",
"url": "https://security.tanium.com/TAN-2026-029"
}
],
"title": "Tanium addressed an improper access controls vulnerability in Comply."
}
},
"cveMetadata": {
"assignerOrgId": "3938794e-25f5-4123-a1ba-5cbd7f104512",
"assignerShortName": "Tanium",
"cveId": "CVE-2026-87073",
"datePublished": "2026-09-09T02:08:35.359Z",
"dateReserved": "2026-09-08T19:05:34.890Z",
"dateUpdated": "2026-09-09T16:10:30.085Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-87032 (GCVE-0-2026-87032)
Vulnerability from cvelistv5 – Published: 2026-09-09 02:08 – Updated: 2026-09-09 16:10
VLAI
EPSS
VEX
Title
Tanium addressed an information disclosure vulnerability in Tanium Server.
Summary
Tanium addressed an information disclosure vulnerability in Tanium Server.
Severity
4.3 (Medium)
SSVC
Exploitation: none
Automatable: no
Technical Impact: partial
CISA Coordinator · CISA-ADP (v2.0.3)
Decision recorded 2026-09-09 15:59 UTC
CWE
- CWE-200 - Exposure of Sensitive Information to an Unauthorized Actor
Assigner
References
1 reference
Impacted products
1 product
| Vendor | Product | Version | |
|---|---|---|---|
| Tanium | Tanium Server |
Affected:
7.7.3 , < 7.7.3.8298
(custom)
Affected: 7.8.2 , < 7.8.2.1198 (custom) Affected: 7.8.4 , < 7.8.4.1327 (custom) |
Date Public
2026-09-09 02:04
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2026-87032",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-09-09T15:59:06.676197Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2026-09-09T16:10:30.321Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"product": "Tanium Server",
"vendor": "Tanium",
"versions": [
{
"lessThan": "7.7.3.8298",
"status": "affected",
"version": "7.7.3",
"versionType": "custom"
},
{
"lessThan": "7.8.2.1198",
"status": "affected",
"version": "7.8.2",
"versionType": "custom"
},
{
"lessThan": "7.8.4.1327",
"status": "affected",
"version": "7.8.4",
"versionType": "custom"
}
]
}
],
"dateAssigned": "2026-09-08T18:18:11.959Z",
"datePublic": "2026-09-09T02:04:24.402Z",
"descriptions": [
{
"lang": "en",
"value": "Tanium addressed an information disclosure vulnerability in Tanium Server."
}
],
"metrics": [
{
"cvssV3_1": {
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
"version": "3.1"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-200",
"description": "Exposure of Sensitive Information to an Unauthorized Actor",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-09-09T02:08:21.927Z",
"orgId": "3938794e-25f5-4123-a1ba-5cbd7f104512",
"shortName": "Tanium"
},
"references": [
{
"name": "TAN-2026-033",
"url": "https://security.tanium.com/TAN-2026-033"
}
],
"title": "Tanium addressed an information disclosure vulnerability in Tanium Server."
}
},
"cveMetadata": {
"assignerOrgId": "3938794e-25f5-4123-a1ba-5cbd7f104512",
"assignerShortName": "Tanium",
"cveId": "CVE-2026-87032",
"datePublished": "2026-09-09T02:08:21.927Z",
"dateReserved": "2026-09-08T18:18:12.461Z",
"dateUpdated": "2026-09-09T16:10:30.321Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-87072 (GCVE-0-2026-87072)
Vulnerability from cvelistv5 – Published: 2026-09-09 02:08 – Updated: 2026-09-09 16:10
VLAI
EPSS
VEX
Title
Tanium addressed an improper access controls vulnerability in Comply.
Summary
Tanium addressed an improper access controls vulnerability in Comply.
Severity
7.1 (High)
SSVC
Exploitation: none
Automatable: no
Technical Impact: partial
CISA Coordinator · CISA-ADP (v2.0.3)
Decision recorded 2026-09-09 15:58 UTC
CWE
- CWE-862 - Missing Authorization
Assigner
References
1 reference
Impacted products
Date Public
2026-09-09 02:04
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2026-87072",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-09-09T15:58:39.966388Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2026-09-09T16:10:30.469Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"product": "Comply",
"vendor": "Tanium",
"versions": [
{
"lessThan": "2.32.252",
"status": "affected",
"version": "2.32",
"versionType": "custom"
},
{
"lessThan": "2.35.306",
"status": "affected",
"version": "2.35",
"versionType": "custom"
},
{
"lessThan": "2.37.308",
"status": "affected",
"version": "2.37",
"versionType": "custom"
}
]
}
],
"dateAssigned": "2026-09-08T19:05:15.214Z",
"datePublic": "2026-09-09T02:04:23.251Z",
"descriptions": [
{
"lang": "en",
"value": "Tanium addressed an improper access controls vulnerability in Comply."
}
],
"metrics": [
{
"cvssV3_1": {
"baseScore": 7.1,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:N",
"version": "3.1"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-862",
"description": "Missing Authorization",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-09-09T02:08:21.685Z",
"orgId": "3938794e-25f5-4123-a1ba-5cbd7f104512",
"shortName": "Tanium"
},
"references": [
{
"name": "TAN-2026-030",
"url": "https://security.tanium.com/TAN-2026-030"
}
],
"title": "Tanium addressed an improper access controls vulnerability in Comply."
}
},
"cveMetadata": {
"assignerOrgId": "3938794e-25f5-4123-a1ba-5cbd7f104512",
"assignerShortName": "Tanium",
"cveId": "CVE-2026-87072",
"datePublished": "2026-09-09T02:08:21.685Z",
"dateReserved": "2026-09-08T19:05:15.633Z",
"dateUpdated": "2026-09-09T16:10:30.469Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-87035 (GCVE-0-2026-87035)
Vulnerability from cvelistv5 – Published: 2026-09-09 02:08 – Updated: 2026-09-09 16:10
VLAI
EPSS
VEX
Title
Tanium addressed an information disclosure vulnerability in Comply.
Summary
Tanium addressed an information disclosure vulnerability in Comply.
Severity
4.3 (Medium)
SSVC
Exploitation: none
Automatable: no
Technical Impact: partial
CISA Coordinator · CISA-ADP (v2.0.3)
Decision recorded 2026-09-09 15:59 UTC
CWE
- CWE-200 - Exposure of Sensitive Information to an Unauthorized Actor
Assigner
References
1 reference
Impacted products
Date Public
2026-09-09 02:04
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2026-87035",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-09-09T15:59:17.582787Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2026-09-09T16:10:30.615Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"product": "Comply",
"vendor": "Tanium",
"versions": [
{
"lessThan": "2.37.308",
"status": "affected",
"version": "2.37",
"versionType": "custom"
}
]
}
],
"dateAssigned": "2026-09-08T18:29:44.058Z",
"datePublic": "2026-09-09T02:04:24.015Z",
"descriptions": [
{
"lang": "en",
"value": "Tanium addressed an information disclosure vulnerability in Comply."
}
],
"metrics": [
{
"cvssV3_1": {
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
"version": "3.1"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-200",
"description": "Exposure of Sensitive Information to an Unauthorized Actor",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-09-09T02:08:08.075Z",
"orgId": "3938794e-25f5-4123-a1ba-5cbd7f104512",
"shortName": "Tanium"
},
"references": [
{
"name": "TAN-2026-032",
"url": "https://security.tanium.com/TAN-2026-032"
}
],
"title": "Tanium addressed an information disclosure vulnerability in Comply."
}
},
"cveMetadata": {
"assignerOrgId": "3938794e-25f5-4123-a1ba-5cbd7f104512",
"assignerShortName": "Tanium",
"cveId": "CVE-2026-87035",
"datePublished": "2026-09-09T02:08:08.075Z",
"dateReserved": "2026-09-08T18:29:44.219Z",
"dateUpdated": "2026-09-09T16:10:30.615Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-87033 (GCVE-0-2026-87033)
Vulnerability from cvelistv5 – Published: 2026-09-09 02:08 – Updated: 2026-09-09 16:10
VLAI
EPSS
VEX
Title
Tanium addressed an improper access controls vulnerability in Comply.
Summary
Tanium addressed an improper access controls vulnerability in Comply.
Severity
5.4 (Medium)
SSVC
Exploitation: none
Automatable: no
Technical Impact: partial
CISA Coordinator · CISA-ADP (v2.0.3)
Decision recorded 2026-09-09 15:59 UTC
CWE
- CWE-639 - Authorization Bypass Through User-Controlled Key
Assigner
References
1 reference
Impacted products
Date Public
2026-09-09 02:04
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2026-87033",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-09-09T15:59:32.551163Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2026-09-09T16:10:30.767Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"product": "Comply",
"vendor": "Tanium",
"versions": [
{
"lessThan": "2.32.252",
"status": "affected",
"version": "2.32",
"versionType": "custom"
},
{
"lessThan": "2.35.306",
"status": "affected",
"version": "2.35",
"versionType": "custom"
},
{
"lessThan": "2.37.308",
"status": "affected",
"version": "2.37",
"versionType": "custom"
}
]
}
],
"dateAssigned": "2026-09-08T18:25:03.987Z",
"datePublic": "2026-09-09T02:04:26.847Z",
"descriptions": [
{
"lang": "en",
"value": "Tanium addressed an improper access controls vulnerability in Comply."
}
],
"metrics": [
{
"cvssV3_1": {
"baseScore": 5.4,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L",
"version": "3.1"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-639",
"description": "Authorization Bypass Through User-Controlled Key",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-09-09T02:08:07.834Z",
"orgId": "3938794e-25f5-4123-a1ba-5cbd7f104512",
"shortName": "Tanium"
},
"references": [
{
"name": "TAN-2026-039",
"url": "https://security.tanium.com/TAN-2026-039"
}
],
"title": "Tanium addressed an improper access controls vulnerability in Comply."
}
},
"cveMetadata": {
"assignerOrgId": "3938794e-25f5-4123-a1ba-5cbd7f104512",
"assignerShortName": "Tanium",
"cveId": "CVE-2026-87033",
"datePublished": "2026-09-09T02:08:07.834Z",
"dateReserved": "2026-09-08T18:25:04.388Z",
"dateUpdated": "2026-09-09T16:10:30.767Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-14892 (GCVE-0-2026-14892)
Vulnerability from cvelistv5 – Published: 2026-09-09 02:07 – Updated: 2026-09-09 16:10
VLAI
EPSS
VEX
Title
Tanium addressed an improper access controls vulnerability in Tanium Server.
Summary
Tanium addressed an improper access controls vulnerability in Tanium Server.
Severity
4.3 (Medium)
SSVC
Exploitation: none
Automatable: no
Technical Impact: partial
CISA Coordinator · CISA-ADP (v2.0.3)
Decision recorded 2026-09-09 15:59 UTC
CWE
- CWE-863 - Incorrect Authorization
Assigner
References
1 reference
Impacted products
1 product
| Vendor | Product | Version | |
|---|---|---|---|
| Tanium | Tanium Server |
Affected:
7.7.3 , < 7.7.3.8298
(custom)
Affected: 7.8.2 , < 7.8.2.1198 (custom) Affected: 7.8.4 , < 7.8.4.1327 (custom) |
Date Public
2026-09-09 02:04
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2026-14892",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-09-09T15:59:25.910685Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2026-09-09T16:10:30.929Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"product": "Tanium Server",
"vendor": "Tanium",
"versions": [
{
"lessThan": "7.7.3.8298",
"status": "affected",
"version": "7.7.3",
"versionType": "custom"
},
{
"lessThan": "7.8.2.1198",
"status": "affected",
"version": "7.8.2",
"versionType": "custom"
},
{
"lessThan": "7.8.4.1327",
"status": "affected",
"version": "7.8.4",
"versionType": "custom"
}
]
}
],
"dateAssigned": "2026-07-06T18:09:55.043Z",
"datePublic": "2026-09-09T02:04:23.631Z",
"descriptions": [
{
"lang": "en",
"value": "Tanium addressed an improper access controls vulnerability in Tanium Server."
}
],
"metrics": [
{
"cvssV3_1": {
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L",
"version": "3.1"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-863",
"description": "Incorrect Authorization",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-09-09T02:07:25.771Z",
"orgId": "3938794e-25f5-4123-a1ba-5cbd7f104512",
"shortName": "Tanium"
},
"references": [
{
"name": "TAN-2026-031",
"url": "https://security.tanium.com/TAN-2026-031"
}
],
"title": "Tanium addressed an improper access controls vulnerability in Tanium Server."
}
},
"cveMetadata": {
"assignerOrgId": "3938794e-25f5-4123-a1ba-5cbd7f104512",
"assignerShortName": "Tanium",
"cveId": "CVE-2026-14892",
"datePublished": "2026-09-09T02:07:25.771Z",
"dateReserved": "2026-07-06T18:09:55.476Z",
"dateUpdated": "2026-09-09T16:10:30.929Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-87030 (GCVE-0-2026-87030)
Vulnerability from cvelistv5 – Published: 2026-09-09 02:07 – Updated: 2026-09-09 16:10
VLAI
EPSS
VEX
Title
Tanium addressed a path traversal vulnerability in Comply.
Summary
Tanium addressed a path traversal vulnerability in Comply.
Severity
8.5 (High)
SSVC
Exploitation: none
Automatable: no
Technical Impact: partial
CISA Coordinator · CISA-ADP (v2.0.3)
Decision recorded 2026-09-09 15:59 UTC
CWE
- CWE-22 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
Assigner
References
1 reference
Impacted products
Date Public
2026-09-09 02:04
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2026-87030",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-09-09T15:59:50.828554Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2026-09-09T16:10:31.105Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"product": "Comply",
"vendor": "Tanium",
"versions": [
{
"lessThan": "2.32.252",
"status": "affected",
"version": "2.32",
"versionType": "custom"
},
{
"lessThan": "2.35.306",
"status": "affected",
"version": "2.35",
"versionType": "custom"
},
{
"lessThan": "2.37.308",
"status": "affected",
"version": "2.37",
"versionType": "custom"
}
]
}
],
"dateAssigned": "2026-09-08T18:11:19.737Z",
"datePublic": "2026-09-09T02:04:28.671Z",
"descriptions": [
{
"lang": "en",
"value": "Tanium addressed a path traversal vulnerability in Comply."
}
],
"metrics": [
{
"cvssV3_1": {
"baseScore": 8.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:H/A:L",
"version": "3.1"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-22",
"description": "Improper Limitation of a Pathname to a Restricted Directory (\u0027Path Traversal\u0027)",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-09-09T02:07:25.568Z",
"orgId": "3938794e-25f5-4123-a1ba-5cbd7f104512",
"shortName": "Tanium"
},
"references": [
{
"name": "TAN-2026-043",
"url": "https://security.tanium.com/TAN-2026-043"
}
],
"title": "Tanium addressed a path traversal vulnerability in Comply."
}
},
"cveMetadata": {
"assignerOrgId": "3938794e-25f5-4123-a1ba-5cbd7f104512",
"assignerShortName": "Tanium",
"cveId": "CVE-2026-87030",
"datePublished": "2026-09-09T02:07:25.568Z",
"dateReserved": "2026-09-08T18:11:20.240Z",
"dateUpdated": "2026-09-09T16:10:31.105Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-87046 (GCVE-0-2026-87046)
Vulnerability from cvelistv5 – Published: 2026-09-09 02:07 – Updated: 2026-09-09 16:10
VLAI
EPSS
VEX
Title
Tanium addressed an improper access controls vulnerability in Comply.
Summary
Tanium addressed an improper access controls vulnerability in Comply.
Severity
4.3 (Medium)
SSVC
Exploitation: none
Automatable: no
Technical Impact: partial
CISA Coordinator · CISA-ADP (v2.0.3)
Decision recorded 2026-09-09 16:00 UTC
CWE
- CWE-863 - Incorrect Authorization
Assigner
References
1 reference
Impacted products
Date Public
2026-09-09 02:04
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2026-87046",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-09-09T16:00:07.506997Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2026-09-09T16:10:31.260Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"product": "Comply",
"vendor": "Tanium",
"versions": [
{
"lessThan": "2.32.252",
"status": "affected",
"version": "2.32",
"versionType": "custom"
},
{
"lessThan": "2.35.306",
"status": "affected",
"version": "2.35",
"versionType": "custom"
},
{
"lessThan": "2.37.308",
"status": "affected",
"version": "2.37",
"versionType": "custom"
}
]
}
],
"dateAssigned": "2026-09-08T18:41:22.263Z",
"datePublic": "2026-09-09T02:04:21.681Z",
"descriptions": [
{
"lang": "en",
"value": "Tanium addressed an improper access controls vulnerability in Comply."
}
],
"metrics": [
{
"cvssV3_1": {
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N",
"version": "3.1"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-863",
"description": "Incorrect Authorization",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-09-09T02:07:25.372Z",
"orgId": "3938794e-25f5-4123-a1ba-5cbd7f104512",
"shortName": "Tanium"
},
"references": [
{
"name": "TAN-2026-026",
"url": "https://security.tanium.com/TAN-2026-026"
}
],
"title": "Tanium addressed an improper access controls vulnerability in Comply."
}
},
"cveMetadata": {
"assignerOrgId": "3938794e-25f5-4123-a1ba-5cbd7f104512",
"assignerShortName": "Tanium",
"cveId": "CVE-2026-87046",
"datePublished": "2026-09-09T02:07:25.372Z",
"dateReserved": "2026-09-08T18:41:22.751Z",
"dateUpdated": "2026-09-09T16:10:31.260Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-87025 (GCVE-0-2026-87025)
Vulnerability from cvelistv5 – Published: 2026-09-09 02:07 – Updated: 2026-09-09 16:10
VLAI
EPSS
VEX
Title
Tanium addressed an improper access controls vulnerability in Comply.
Summary
Tanium addressed an improper access controls vulnerability in Comply.
Severity
5.4 (Medium)
SSVC
Exploitation: none
Automatable: no
Technical Impact: partial
CISA Coordinator · CISA-ADP (v2.0.3)
Decision recorded 2026-09-09 15:59 UTC
CWE
- CWE-639 - Authorization Bypass Through User-Controlled Key
Assigner
References
1 reference
Impacted products
Date Public
2026-09-09 02:04
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2026-87025",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-09-09T15:59:42.726606Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2026-09-09T16:10:31.401Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"product": "Comply",
"vendor": "Tanium",
"versions": [
{
"lessThan": "2.32.252",
"status": "affected",
"version": "2.32",
"versionType": "custom"
},
{
"lessThan": "2.35.306",
"status": "affected",
"version": "2.35",
"versionType": "custom"
},
{
"lessThan": "2.37.308",
"status": "affected",
"version": "2.37",
"versionType": "custom"
}
]
}
],
"dateAssigned": "2026-09-08T17:59:40.600Z",
"datePublic": "2026-09-09T02:04:29.441Z",
"descriptions": [
{
"lang": "en",
"value": "Tanium addressed an improper access controls vulnerability in Comply."
}
],
"metrics": [
{
"cvssV3_1": {
"baseScore": 5.4,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L",
"version": "3.1"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-639",
"description": "Authorization Bypass Through User-Controlled Key",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-09-09T02:07:11.512Z",
"orgId": "3938794e-25f5-4123-a1ba-5cbd7f104512",
"shortName": "Tanium"
},
"references": [
{
"name": "TAN-2026-045",
"url": "https://security.tanium.com/TAN-2026-045"
}
],
"title": "Tanium addressed an improper access controls vulnerability in Comply."
}
},
"cveMetadata": {
"assignerOrgId": "3938794e-25f5-4123-a1ba-5cbd7f104512",
"assignerShortName": "Tanium",
"cveId": "CVE-2026-87025",
"datePublished": "2026-09-09T02:07:11.512Z",
"dateReserved": "2026-09-08T17:59:41.117Z",
"dateUpdated": "2026-09-09T16:10:31.401Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-87075 (GCVE-0-2026-87075)
Vulnerability from cvelistv5 – Published: 2026-09-09 02:06 – Updated: 2026-09-09 16:10
VLAI
EPSS
VEX
Title
Tanium addressed an improper access controls vulnerability in Comply.
Summary
Tanium addressed an improper access controls vulnerability in Comply.
Severity
8.1 (High)
SSVC
Exploitation: none
Automatable: no
Technical Impact: partial
CISA Coordinator · CISA-ADP (v2.0.3)
Decision recorded 2026-09-09 16:01 UTC
CWE
- CWE-863 - Incorrect Authorization
Assigner
References
1 reference
Impacted products
Date Public
2026-09-09 02:04
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2026-87075",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-09-09T16:01:17.174682Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2026-09-09T16:10:31.547Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"product": "Comply",
"vendor": "Tanium",
"versions": [
{
"lessThan": "2.32.252",
"status": "affected",
"version": "2.32",
"versionType": "custom"
},
{
"lessThan": "2.35.306",
"status": "affected",
"version": "2.35",
"versionType": "custom"
},
{
"lessThan": "2.37.308",
"status": "affected",
"version": "2.37",
"versionType": "custom"
}
]
}
],
"dateAssigned": "2026-09-08T19:06:30.163Z",
"datePublic": "2026-09-09T02:04:26.051Z",
"descriptions": [
{
"lang": "en",
"value": "Tanium addressed an improper access controls vulnerability in Comply."
}
],
"metrics": [
{
"cvssV3_1": {
"baseScore": 8.1,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H",
"version": "3.1"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-863",
"description": "Incorrect Authorization",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-09-09T02:06:57.134Z",
"orgId": "3938794e-25f5-4123-a1ba-5cbd7f104512",
"shortName": "Tanium"
},
"references": [
{
"name": "TAN-2026-037",
"url": "https://security.tanium.com/TAN-2026-037"
}
],
"title": "Tanium addressed an improper access controls vulnerability in Comply."
}
},
"cveMetadata": {
"assignerOrgId": "3938794e-25f5-4123-a1ba-5cbd7f104512",
"assignerShortName": "Tanium",
"cveId": "CVE-2026-87075",
"datePublished": "2026-09-09T02:06:57.134Z",
"dateReserved": "2026-09-08T19:06:30.349Z",
"dateUpdated": "2026-09-09T16:10:31.547Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-87047 (GCVE-0-2026-87047)
Vulnerability from cvelistv5 – Published: 2026-09-09 02:06 – Updated: 2026-09-09 16:10
VLAI
EPSS
VEX
Title
Tanium addressed an improper access controls vulnerability in Comply.
Summary
Tanium addressed an improper access controls vulnerability in Comply.
Severity
6.3 (Medium)
SSVC
Exploitation: none
Automatable: no
Technical Impact: partial
CISA Coordinator · CISA-ADP (v2.0.3)
Decision recorded 2026-09-09 15:59 UTC
CWE
- CWE-639 - Authorization Bypass Through User-Controlled Key
Assigner
References
1 reference
Impacted products
Date Public
2026-09-09 02:04
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2026-87047",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-09-09T15:59:57.410721Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2026-09-09T16:10:31.692Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"product": "Comply",
"vendor": "Tanium",
"versions": [
{
"lessThan": "2.32.252",
"status": "affected",
"version": "2.32",
"versionType": "custom"
},
{
"lessThan": "2.35.306",
"status": "affected",
"version": "2.35",
"versionType": "custom"
},
{
"lessThan": "2.37.308",
"status": "affected",
"version": "2.37",
"versionType": "custom"
}
]
}
],
"dateAssigned": "2026-09-08T18:48:32.209Z",
"datePublic": "2026-09-09T02:04:26.462Z",
"descriptions": [
{
"lang": "en",
"value": "Tanium addressed an improper access controls vulnerability in Comply."
}
],
"metrics": [
{
"cvssV3_1": {
"baseScore": 6.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
"version": "3.1"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-639",
"description": "Authorization Bypass Through User-Controlled Key",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-09-09T02:06:56.913Z",
"orgId": "3938794e-25f5-4123-a1ba-5cbd7f104512",
"shortName": "Tanium"
},
"references": [
{
"name": "TAN-2026-038",
"url": "https://security.tanium.com/TAN-2026-038"
}
],
"title": "Tanium addressed an improper access controls vulnerability in Comply."
}
},
"cveMetadata": {
"assignerOrgId": "3938794e-25f5-4123-a1ba-5cbd7f104512",
"assignerShortName": "Tanium",
"cveId": "CVE-2026-87047",
"datePublished": "2026-09-09T02:06:56.913Z",
"dateReserved": "2026-09-08T18:48:32.711Z",
"dateUpdated": "2026-09-09T16:10:31.692Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-87019 (GCVE-0-2026-87019)
Vulnerability from cvelistv5 – Published: 2026-09-09 02:06 – Updated: 2026-09-09 16:10
VLAI
EPSS
VEX
Title
Tanium addressed an improper access controls vulnerability in Comply.
Summary
Tanium addressed an improper access controls vulnerability in Comply.
Severity
4.3 (Medium)
SSVC
Exploitation: none
Automatable: no
Technical Impact: partial
CISA Coordinator · CISA-ADP (v2.0.3)
Decision recorded 2026-09-09 16:00 UTC
CWE
- CWE-639 - Authorization Bypass Through User-Controlled Key
Assigner
References
1 reference
Impacted products
Date Public
2026-09-09 02:04
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2026-87019",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-09-09T16:00:20.158674Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2026-09-09T16:10:31.830Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"product": "Comply",
"vendor": "Tanium",
"versions": [
{
"lessThan": "2.32.252",
"status": "affected",
"version": "2.32.252",
"versionType": "custom"
},
{
"lessThan": "2.35.306",
"status": "affected",
"version": "2.35.306",
"versionType": "custom"
},
{
"lessThan": "2.37.308",
"status": "affected",
"version": "2.37.308",
"versionType": "custom"
}
]
}
],
"dateAssigned": "2026-09-08T17:02:36.927Z",
"datePublic": "2026-09-09T02:04:25.050Z",
"descriptions": [
{
"lang": "en",
"value": "Tanium addressed an improper access controls vulnerability in Comply."
}
],
"metrics": [
{
"cvssV3_1": {
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N",
"version": "3.1"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-639",
"description": "Authorization Bypass Through User-Controlled Key",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-09-09T02:06:42.496Z",
"orgId": "3938794e-25f5-4123-a1ba-5cbd7f104512",
"shortName": "Tanium"
},
"references": [
{
"name": "TAN-2026-035",
"url": "https://security.tanium.com/TAN-2026-035"
}
],
"title": "Tanium addressed an improper access controls vulnerability in Comply."
}
},
"cveMetadata": {
"assignerOrgId": "3938794e-25f5-4123-a1ba-5cbd7f104512",
"assignerShortName": "Tanium",
"cveId": "CVE-2026-87019",
"datePublished": "2026-09-09T02:06:42.496Z",
"dateReserved": "2026-09-08T17:02:37.401Z",
"dateUpdated": "2026-09-09T16:10:31.830Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-14505 (GCVE-0-2026-14505)
Vulnerability from cvelistv5 – Published: 2026-09-09 02:06 – Updated: 2026-09-09 16:10
VLAI
EPSS
VEX
Title
Tanium addressed a path traversal vulnerability in Tanium Data Service.
Summary
Tanium addressed a path traversal vulnerability in Tanium Data Service.
Severity
6.6 (Medium)
SSVC
Exploitation: none
Automatable: no
Technical Impact: total
CISA Coordinator · CISA-ADP (v2.0.3)
Decision recorded 2026-09-09 16:00 UTC
CWE
- CWE-22 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
Assigner
References
1 reference
Impacted products
1 product
| Vendor | Product | Version | |
|---|---|---|---|
| Tanium | Tanium Data Service |
Affected:
4.2 , < 4.2.345
(custom)
|
Date Public
2026-09-09 02:04
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2026-14505",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "total"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-09-09T16:00:42.870897Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2026-09-09T16:10:31.974Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"product": "Tanium Data Service",
"vendor": "Tanium",
"versions": [
{
"lessThan": "4.2.345",
"status": "affected",
"version": "4.2",
"versionType": "custom"
}
]
}
],
"dateAssigned": "2026-07-02T18:24:41.373Z",
"datePublic": "2026-09-09T02:04:29.041Z",
"descriptions": [
{
"lang": "en",
"value": "Tanium addressed a path traversal vulnerability in Tanium Data Service."
}
],
"metrics": [
{
"cvssV3_1": {
"baseScore": 6.6,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-22",
"description": "Improper Limitation of a Pathname to a Restricted Directory (\u0027Path Traversal\u0027)",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-09-09T02:06:42.274Z",
"orgId": "3938794e-25f5-4123-a1ba-5cbd7f104512",
"shortName": "Tanium"
},
"references": [
{
"name": "TAN-2026-044",
"url": "https://security.tanium.com/TAN-2026-044"
}
],
"title": "Tanium addressed a path traversal vulnerability in Tanium Data Service."
}
},
"cveMetadata": {
"assignerOrgId": "3938794e-25f5-4123-a1ba-5cbd7f104512",
"assignerShortName": "Tanium",
"cveId": "CVE-2026-14505",
"datePublished": "2026-09-09T02:06:42.274Z",
"dateReserved": "2026-07-02T18:24:41.863Z",
"dateUpdated": "2026-09-09T16:10:31.974Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-87037 (GCVE-0-2026-87037)
Vulnerability from cvelistv5 – Published: 2026-09-09 02:04 – Updated: 2026-09-09 16:10
VLAI
EPSS
VEX
Title
Tanium addressed an improper access controls vulnerability in Comply.
Summary
Tanium addressed an improper access controls vulnerability in Comply.
Severity
5.4 (Medium)
SSVC
Exploitation: none
Automatable: no
Technical Impact: partial
CISA Coordinator · CISA-ADP (v2.0.3)
Decision recorded 2026-09-09 16:00 UTC
CWE
- CWE-862 - Missing Authorization
Assigner
References
1 reference
Impacted products
Date Public
2026-09-09 02:04
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2026-87037",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-09-09T16:00:59.310783Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2026-09-09T16:10:32.131Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"product": "Comply",
"vendor": "Tanium",
"versions": [
{
"lessThan": "2.32.252",
"status": "affected",
"version": "2.32",
"versionType": "custom"
},
{
"lessThan": "2.35.306",
"status": "affected",
"version": "2.35",
"versionType": "custom"
},
{
"lessThan": "2.37.308",
"status": "affected",
"version": "2.37",
"versionType": "custom"
}
]
}
],
"dateAssigned": "2026-09-08T18:36:35.907Z",
"datePublic": "2026-09-09T02:04:21.242Z",
"descriptions": [
{
"lang": "en",
"value": "Tanium addressed an improper access controls vulnerability in Comply."
}
],
"metrics": [
{
"cvssV3_1": {
"baseScore": 5.4,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N",
"version": "3.1"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-862",
"description": "Missing Authorization",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-09-09T02:04:50.531Z",
"orgId": "3938794e-25f5-4123-a1ba-5cbd7f104512",
"shortName": "Tanium"
},
"references": [
{
"name": "TAN-2026-025",
"url": "https://security.tanium.com/TAN-2026-025"
}
],
"title": "Tanium addressed an improper access controls vulnerability in Comply."
}
},
"cveMetadata": {
"assignerOrgId": "3938794e-25f5-4123-a1ba-5cbd7f104512",
"assignerShortName": "Tanium",
"cveId": "CVE-2026-87037",
"datePublished": "2026-09-09T02:04:50.531Z",
"dateReserved": "2026-09-08T18:36:36.358Z",
"dateUpdated": "2026-09-09T16:10:32.131Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-87088 (GCVE-0-2026-87088)
Vulnerability from cvelistv5 – Published: 2026-09-09 02:00 – Updated: 2026-09-09 16:10
VLAI
EPSS
VEX
Title
Tanium addressed an unauthorized code execution vulnerability in Enforce.
Summary
Tanium addressed an unauthorized code execution vulnerability in Enforce.
Severity
SSVC
Exploitation: none
Automatable: no
Technical Impact: total
CISA Coordinator · CISA-ADP (v2.0.3)
Decision recorded 2026-09-09 16:02 UTC
CWE
- CWE-78 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
Assigner
References
1 reference
Impacted products
Date Public
2026-09-09 02:00
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2026-87088",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "total"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-09-09T16:02:39.759020Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2026-09-09T16:10:32.275Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"product": "Enforce",
"vendor": "Tanium",
"versions": [
{
"lessThan": "2.9.718",
"status": "affected",
"version": "2.9",
"versionType": "custom"
},
{
"lessThan": "2.10.760",
"status": "affected",
"version": "2.10",
"versionType": "custom"
},
{
"lessThan": "3.0.346",
"status": "affected",
"version": "3.0",
"versionType": "custom"
}
]
}
],
"dateAssigned": "2026-09-08T19:46:12.575Z",
"datePublic": "2026-09-09T02:00:45.947Z",
"descriptions": [
{
"lang": "en",
"value": "Tanium addressed an unauthorized code execution vulnerability in Enforce."
}
],
"metrics": [
{
"cvssV3_1": {
"baseScore": 7,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-78",
"description": "Improper Neutralization of Special Elements used in an OS Command (\u0027OS Command Injection\u0027)",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-09-09T02:00:58.099Z",
"orgId": "3938794e-25f5-4123-a1ba-5cbd7f104512",
"shortName": "Tanium"
},
"references": [
{
"name": "TAN-2026-022",
"url": "https://security.tanium.com/TAN-2026-022"
}
],
"title": "Tanium addressed an unauthorized code execution vulnerability in Enforce."
}
},
"cveMetadata": {
"assignerOrgId": "3938794e-25f5-4123-a1ba-5cbd7f104512",
"assignerShortName": "Tanium",
"cveId": "CVE-2026-87088",
"datePublished": "2026-09-09T02:00:58.099Z",
"dateReserved": "2026-09-08T19:46:13.057Z",
"dateUpdated": "2026-09-09T16:10:32.275Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-11617 (GCVE-0-2026-11617)
Vulnerability from cvelistv5 – Published: 2026-08-19 21:05 – Updated: 2026-08-20 15:26
VLAI
EPSS
VEX
Title
Tanium addressed a compression bomb vulnerability in Findings.
Summary
Tanium addressed a compression bomb vulnerability in Findings.
Severity
SSVC
Exploitation: none
Automatable: no
Technical Impact: partial
CISA Coordinator · CISA-ADP (v2.0.3)
Decision recorded 2026-08-20 15:14 UTC
CWE
- CWE-409 - Improper Handling of Highly Compressed Data (Data Amplification)
Assigner
References
1 reference
Impacted products
Date Public
2026-08-19 21:05
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2026-11617",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-08-20T15:14:52.005297Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2026-08-20T15:26:32.910Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"product": "Findings",
"vendor": "Tanium",
"versions": [
{
"lessThan": "1.2.95",
"status": "affected",
"version": "1.2",
"versionType": "custom"
},
{
"lessThan": "1.4.105",
"status": "affected",
"version": "1.4",
"versionType": "custom"
}
]
}
],
"dateAssigned": "2026-06-08T19:10:02.453Z",
"datePublic": "2026-08-19T21:05:00.992Z",
"descriptions": [
{
"lang": "en",
"value": "Tanium addressed a compression bomb vulnerability in Findings."
}
],
"metrics": [
{
"cvssV3_1": {
"baseScore": 3.1,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:L",
"version": "3.1"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-409",
"description": "Improper Handling of Highly Compressed Data (Data Amplification)",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-08-19T21:05:20.781Z",
"orgId": "3938794e-25f5-4123-a1ba-5cbd7f104512",
"shortName": "Tanium"
},
"references": [
{
"name": "TAN-2026-020",
"url": "https://security.tanium.com/TAN-2026-020"
}
],
"title": "Tanium addressed a compression bomb vulnerability in Findings."
}
},
"cveMetadata": {
"assignerOrgId": "3938794e-25f5-4123-a1ba-5cbd7f104512",
"assignerShortName": "Tanium",
"cveId": "CVE-2026-11617",
"datePublished": "2026-08-19T21:05:20.781Z",
"dateReserved": "2026-06-08T19:10:04.883Z",
"dateUpdated": "2026-08-20T15:26:32.910Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-75476 (GCVE-0-2026-75476)
Vulnerability from cvelistv5 – Published: 2026-08-19 21:05 – Updated: 2026-08-20 15:26
VLAI
EPSS
VEX
Title
Tanium addressed a compression bomb vulnerability in Threat Response.
Summary
Tanium addressed a compression bomb vulnerability in Threat Response.
Severity
SSVC
Exploitation: none
Automatable: no
Technical Impact: partial
CISA Coordinator · CISA-ADP (v2.0.3)
Decision recorded 2026-08-20 15:15 UTC
CWE
- CWE-409 - Improper Handling of Highly Compressed Data (Data Amplification)
Assigner
References
1 reference
Impacted products
1 product
| Vendor | Product | Version | |
|---|---|---|---|
| Tanium | Threat Response |
Affected:
4.9 , < 4.9.437
(custom)
Affected: 4.12 , < 4.12.308 (custom) Affected: 4.17 , < 4.17.277 (custom) |
Date Public
2026-08-19 21:04
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2026-75476",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-08-20T15:15:06.784114Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2026-08-20T15:26:33.106Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"product": "Threat Response",
"vendor": "Tanium",
"versions": [
{
"lessThan": "4.9.437",
"status": "affected",
"version": "4.9",
"versionType": "custom"
},
{
"lessThan": "4.12.308",
"status": "affected",
"version": "4.12",
"versionType": "custom"
},
{
"lessThan": "4.17.277",
"status": "affected",
"version": "4.17",
"versionType": "custom"
}
]
}
],
"dateAssigned": "2026-08-17T19:56:29.060Z",
"datePublic": "2026-08-19T21:04:55.622Z",
"descriptions": [
{
"lang": "en",
"value": "Tanium addressed a compression bomb vulnerability in Threat Response."
}
],
"metrics": [
{
"cvssV3_1": {
"baseScore": 3.1,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:L",
"version": "3.1"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-409",
"description": "Improper Handling of Highly Compressed Data (Data Amplification)",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-08-19T21:05:08.027Z",
"orgId": "3938794e-25f5-4123-a1ba-5cbd7f104512",
"shortName": "Tanium"
},
"references": [
{
"name": "TAN-2026-021",
"url": "https://security.tanium.com/TAN-2026-021"
}
],
"title": "Tanium addressed a compression bomb vulnerability in Threat Response."
}
},
"cveMetadata": {
"assignerOrgId": "3938794e-25f5-4123-a1ba-5cbd7f104512",
"assignerShortName": "Tanium",
"cveId": "CVE-2026-75476",
"datePublished": "2026-08-19T21:05:08.027Z",
"dateReserved": "2026-08-17T19:56:29.605Z",
"dateUpdated": "2026-08-20T15:26:33.106Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}