CVE-2025-15340

Tanium Comply is affected by an incorrect default permissions issue. Connected sources provide concrete details: the vulnerability concerns Tanium Comply with an underlying permission misconfiguration and a stated remote code execution possibility tied to PHP 8.8.4.10.1.1. The root cause is the i...

CVE-2026-87034

Tanium Comply was affected by a SQL injection vulnerability that has been addressed by the vendor. The vulnerability is rated CVSS 8.3 (HIGH) with a vector of AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H, indicating a network-accessible flaw requiring user interaction and high attack complexity , but with...

CVE-2026-87036

Tanium Comply is affected by an improper access controls vulnerability, rated HIGH (CVSS 8.1) due to network-reachable, low-privilege exploitation causing high integrity and availability impact with no confidentiality loss. Tanium has addressed the issue, with details available via their security...

CVE-2026-87023

Tanium Comply is affected by a path traversal vulnerability that has been addressed by the vendor. The CVSS 3.1 score is 8.5 (HIGH) , with a network attack vector, low complexity, low privileges required, no user interaction, and changed scope —implying the vulnerable component may reside in a di...

CVE-2026-87030

Tanium Comply is affected by a path traversal vulnerability that Tanium has addressed (see TAN-2026-043 ). The vulnerability is rated CVSS 8.5 (High) with a vector of AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:H/A:L, indicating a network-exploitable flaw requiring low privileges and no user interaction, with ...

CVE-2026-87075

Tanium Comply contains an improper access controls vulnerability that the vendor has addressed. The flaw carries a CVSS 3.1 score of 8.1 (HIGH) , with a network attack vector, low complexity, and low privileges required. Successful exploitation results in high integrity and high availability impa...

CVE-2026-87021

Tanium Comply is affected by an unauthorized code execution vulnerability. The CVSS v3.1 score is 7.2 (HIGH) , with a network attack vector, low complexity, and high privileges required , resulting in high impact on confidentiality, integrity, and availability. No user interaction is needed. Tani...

CVE-2026-87048

Tanium Comply contained an improper access controls vulnerability, rated CVSS 5.4 (Medium) . The vector is network-based with low attack complexity and low privileges required , no user interaction, resulting in low impact to integrity and availability with no confidentiality impact. Tanium has a...

CVE-2026-87073

Tanium Comply is affected by an improper access controls vulnerability, as addressed by Tanium and referenced in advisory TAN-2026-029 . The CVSS 3.1 score is 6.5 (MEDIUM) with the vector AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N , indicating a network-based attack with low complexity and low privilege...

CVE-2026-87035

Tanium addressed an information disclosure vulnerability in its Comply product. The CNA-assigned CVSS 3.1 score is 4.3 (MEDIUM) with a network attack vector, low complexity, low privileges required, no user interaction, and a low impact on confidentiality with no integrity or availability impact....

CVE-2026-87072

Tanium Comply is affected by an improper access controls vulnerability, rated CVSS 7.1 (HIGH) . The attack vector is network-based , requires low privileges and no user interaction , with high confidentiality and low integrity impact. Tanium has addressed the issue; details are available at the v...

CVE-2026-87019

Tanium Comply is affected by an improper access controls vulnerability, as reported by Tanium in advisory TAN-2026-035 . The issue was addressed by the vendor. The CVSS 3.1 score is 4.3 (MEDIUM) , with a network attack vector, low complexity, and low privileges required; the impact is limited to ...

CVE-2026-87025

Tanium Comply is affected by an improper access controls vulnerability, assigned CVE-2026-87025 . The flaw allows a network-based attacker with low privileges and no user interaction to achieve low integrity and low availability impact, but no confidentiality impact (CVSS 3.1 base score 5.4, MEDI...

CVE-2026-87037

Tanium Comply is affected by an improper access controls vulnerability, rated CVSS 5.4 (MEDIUM) with a network attack vector, low privileges required, and low impact on both confidentiality and integrity (no availability impact). Tanium has addressed the issue per its security advisory (TAN-2026-...

CVE-2026-87033

Tanium Comply is affected by an improper access controls vulnerability, rated CVSS 5.4 (MEDIUM) with a network vector, low attack complexity, and low required privileges. The vulnerability carries low integrity and availability impact with no confidentiality impact. Tanium has addressed the issue...

CVE-2026-87047

Tanium Comply is affected by an improper access controls vulnerability, assigned CVSS 3.1 score of 6.3 (Medium) with a network attack vector, low complexity, and low required privileges, resulting in low impacts to confidentiality, integrity, and availability. The vulnerability has been addressed...

CVE-2026-87046

Tanium Comply contains an improper access controls vulnerability addressed by the vendor. The CVSS 3.1 score is 4.3 (MEDIUM) , with a network attack vector, low complexity, and low privileges required. The impact is limited to low integrity with no reported confidentiality or availability impact....