CVE Field Guide
About Us
CVE-2026-87034
PUBLISHED
Tanium addressed a SQL injection vulnerability in Comply.
Assigner:
Tanium
Reserved:
08.09.2026
Published:
09.09.2026
Updated:
09.09.2026
Tanium addressed a SQL injection vulnerability in Comply.
Metrics
CVSS 3.1
CVSS Vector:
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H
CVSS Score:
8.3
CVSS score
8.3
Attack Vector
Network
Scope
Changed
Attack Complexity
High
Confidentiality Impact
High
Privileges Required
None
Integrity Impact
High
User Interaction
Required
Availability Impact
High
CVSS 3.1
Product Status
Vendor
Tanium
Product
Comply
Versions
affected from 2.32 to 2.32.252 (excl.)
affected from 2.35 to 2.35.306 (excl.)
affected from 2.37 to 2.37.308 (excl.)
References
TAN-2026-042
Problem Types
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CWE