CVE-2026-87088 PUBLISHED

Tanium addressed an unauthorized code execution vulnerability in Enforce.

Assigner: Tanium
Reserved: 08.09.2026 Published: 09.09.2026 Updated: 09.09.2026

Tanium addressed an unauthorized code execution vulnerability in Enforce.

Metrics

CVSS Vector: CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
CVSS Score: 7

Product Status

Vendor Tanium
Product Enforce
Versions
  • affected from 2.9 to 2.9.718 (excl.)
  • affected from 2.10 to 2.10.760 (excl.)
  • affected from 3.0 to 3.0.346 (excl.)

References

Problem Types

  • Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') CWE