PatchSiren cyber security CVE debrief

CVE-2026-87021 Tanium CVE debrief

CVE-2026-87021 is a high-severity unauthorized code execution vulnerability in Tanium Comply. The vulnerability affects Tanium Comply versions 2.32.0 to 2.32.252, 2.35.0 to 2.35.306, and 2.37.0 to 2.37.308. Tanium has addressed the vulnerability. Defenders should verify and apply patches, review inventory, and monitor systems for suspicious activity related to the vulnerability. The CVE record and NVD entry provide details on the vulnerability, with the NVD entry currently Analyzed. This vulnerability allows unauthorized code execution, which can have significant operational impacts. Defenders responsible for Tanium Comply installations should take immediate action to secure their

Vendor: Tanium
Product: Comply
CVSS: HIGH 7.2
CISA KEV: Not listed in stored evidence
Original CVE published: 2026-09-09
Original CVE updated: 2026-09-16
Advisory published: 2026-09-09
Advisory updated: 2026-09-16

Who should care

Defenders responsible for Tanium Comply installations should verify and apply patches, review inventory, and monitor systems for suspicious activity

Why it matters

CVE-2026-87021 is a high-severity vulnerability in Tanium Comply that allows unauthorized code execution. Defenders responsible for Tanium Comply installations should verify and apply patches, review inventory, and monitor systems for suspicious activity.

Verify and apply patches to prevent code execution
Review inventory to identify vulnerable Tanium Comply installations
Monitor systems for suspicious activity related to the vulnerability

Technical summary

Tanium Comply versions 2.32.0 to 2.32.252, 2.35.0 to 2.35.306, and 2.37.0 to 2.37.308 are vulnerable to unauthorized code execution. The vulnerability has been addressed by Tanium in later versions of Comply. To prevent exploitation, defenders should verify and apply patches to vulnerable installations. The vulnerability is a high-severity issue, with a CVSS score of 7.2, indicating a significant risk to affected systems. The affected product deployments should be identified, and owners assigned for follow-up to ensure timely remediation.

Defensive priority

Verify and apply Tanium Comply patches

Recommended defensive actions

Verify Tanium Comply version and apply patches if necessary
Review and update inventory of Tanium Comply installations
Monitor Tanium Comply systems for suspicious activity

Evidence notes

The CVE record and NVD entry provide details on the vulnerability. The vendor, Tanium, addressed an unauthorized code execution vulnerability in Comply. The NVD entry is currently Analyzed.

Sources and references

Verified primary and authoritative sources

CVE-2026-87021 CVE Program record
Publisher, destination, and source semantics verified

URL: https://www.cve.org/CVERecord?id=CVE-2026-87021

CVE Program - Official CVE Program record with source-provided CVE metadata.
CVE-2026-87021 NVD vulnerability detail
Publisher, destination, and source semantics verified

URL: https://nvd.nist.gov/vuln/detail/CVE-2026-87021

NIST National Vulnerability Database - Official NIST NVD detail page and source-specific vulnerability assessment.

Supplemental references

Source reference
Unverified legacy reference

URL: https://security.tanium.com/TAN-2026-040

3938794e-25f5-4123-a1ba-5cbd7f104512 - Vendor Advisory

Methodology and review provenance

AI-assisted synthesis based on stored public vulnerability evidence. System validation, approval state, and publication status do not by themselves establish human review of this revision. PatchSiren helps prioritize defensive review and does not prove exposure or remediation on any system.