CVE Field Guide
About Us
CVE-2026-87084
PUBLISHED
Tanium addressed a server-side request forgery vulnerability in Enforce.
Assigner:
Tanium
Reserved:
08.09.2026
Published:
09.09.2026
Updated:
09.09.2026
Tanium addressed a server-side request forgery vulnerability in Enforce.
Metrics
CVSS 3.1
CVSS Vector:
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N
CVSS Score:
7.7
CVSS score
7.7
Attack Vector
Network
Scope
Changed
Attack Complexity
Low
Confidentiality Impact
High
Privileges Required
Low
Integrity Impact
None
User Interaction
None
Availability Impact
None
CVSS 3.1
Product Status
Vendor
Tanium
Product
Enforce
Versions
affected from 2.9 to 2.9.718 (excl.)
affected from 2.10 to 2.10.760 (excl.)
affected from 3.0 to 3.0.346 (excl.)
References
TAN-2026-036
Problem Types
Server-Side Request Forgery (SSRF)
CWE