Description
Tanium addressed an improper access controls vulnerability in Comply.
Published: 2026-09-09
Score: 5.4 Medium
EPSS: < 1% Very Low
KEV: No
Impact: Unauthorized Access to Comply Data
Action: Apply Patch
AI Analysis

Impact

Tanium issued a fix for an improper access controls vulnerability in Comply. The flaw allows a user with improper privileges to view or modify sensitive information that should be restricted, potentially leading to unauthorized data exposure.

Affected Systems

Affected vendor: Tanium. Affected product: Comply, version unspecified.

Risk and Exploitability

The CVSS score of 5.4 indicates a moderate severity. With no EPSS information and no listing in the CISA KEV catalog, the exploitation likelihood appears low, but the flaw still permits unauthorized access if an attacker gains a valid account. The likely attack vector is an authenticated internal user who bypasses access controls, inferred from the description of an improper access control issue.

Generated by OpenCVE AI on September 9, 2026 at 04:17 UTC.

Remediation

No vendor fix or workaround currently provided.

OpenCVE Recommended Actions

  • Apply any Tanium-provided patches or updates for Comply that address the improper access control issue.
  • Configure Comply access controls to enforce least privilege, ensuring only authorized users can view or modify sensitive data.
  • Regularly audit access logs and privileges for Comply to detect potential unauthorized access.

Generated by OpenCVE AI on September 9, 2026 at 04:17 UTC.

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

References
Link Providers
https://security.tanium.com/TAN-2026-027 cve-icon cve-icon
History

Wed, 16 Sep 2026 15:45:00 +0000

Type Values Removed Values Added
CPEs cpe:2.3:a:tanium:comply:*:*:*:*:*:*:*:*

Thu, 10 Sep 2026 20:30:00 +0000

Type Values Removed Values Added
First Time appeared Tanium
Tanium comply
Vendors & Products Tanium
Tanium comply

Wed, 09 Sep 2026 17:30:00 +0000

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}

Wed, 09 Sep 2026 02:30:00 +0000

Type Values Removed Values Added
Description Tanium addressed an improper access controls vulnerability in Comply.
Title Tanium addressed an improper access controls vulnerability in Comply.
Weaknesses CWE-862
References
Metrics cvssV3_1

{'score': 5.4, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L'}

Subscriptions

Tanium Comply
cve-icon MITRE

Status: PUBLISHED

Assigner: Tanium

Published:

Updated: 2026-09-09T16:10:29.781Z

Reserved: 2026-09-08T18:52:45.827Z

Link: CVE-2026-87048

cve-icon Vulnrichment

Updated: 2026-09-09T16:04:22.411Z

cve-icon NVD

Status : Analyzed

Published: 2026-09-09T03:17:26.610

Modified: 2026-09-16T15:24:59.563

Link: CVE-2026-87048

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

Updated: 2026-09-10T20:15:06Z

Weaknesses