CVE Field Guide
About Us
CVE-2026-87019
PUBLISHED
Tanium addressed an improper access controls vulnerability in Comply.
Assigner:
Tanium
Reserved:
08.09.2026
Published:
09.09.2026
Updated:
09.09.2026
Tanium addressed an improper access controls vulnerability in Comply.
Metrics
CVSS 3.1
CVSS Vector:
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
CVSS Score:
4.3
CVSS score
4.3
Attack Vector
Network
Scope
Unchanged
Attack Complexity
Low
Confidentiality Impact
None
Privileges Required
Low
Integrity Impact
Low
User Interaction
None
Availability Impact
None
CVSS 3.1
Product Status
Vendor
Tanium
Product
Comply
Versions
affected from 2.32.252 to 2.32.252 (excl.)
affected from 2.35.306 to 2.35.306 (excl.)
affected from 2.37.308 to 2.37.308 (excl.)
References
TAN-2026-035
Problem Types
Authorization Bypass Through User-Controlled Key
CWE