PatchSiren

PatchSiren cyber security CVE debrief

CVE-2026-87072 Tanium CVE debrief

CVE-2026-87072 is an improper access controls vulnerability in Tanium Comply. The CVE record was published on 2026-09-09T03:17:26.723Z and has not been modified since then. The NVD entry is currently Analyzed. The vulnerability could allow an attacker to access sensitive information. Defenders should assess exposure and apply remediation. The CVSS score is 7.1 and the severity is HIGH. The vulnerability affects Tanium Comply versions 2.32.0 to 2.32.252, 2.35.0 to 2.35.306, and 2.37.0 to 2.37.308.

Vendor
Tanium
Product
Comply
CVSS
HIGH 7.1
CISA KEV
Not listed in stored evidence
Original CVE published
2026-09-09
Original CVE updated
2026-09-16
Advisory published
2026-09-09
Advisory updated
2026-09-16

Who should care

Defenders responsible for Tanium Comply systems should assess exposure and apply remediation. They should verify exposure in Tanium Comply versions 2.32.0 to 2.32.252, 2.35.0 to 2.35.306, and 2.37.0 to 2.37.308. Defenders should also monitor for potential exploitation attempts and review access controls for Tanium Comply.

Why it matters

Defenders should prioritize verifying exposure in Tanium Comply and applying vendor remediation to address an improper access controls vulnerability.

  • Verify exposure in Tanium Comply versions 2.32.0 to 2.32.252, 2.35.0 to 2.35.306, and 2.37.0 to 2.37.308
  • Apply vendor remediation to address improper access controls
  • Monitor for potential exploitation attempts

Technical summary

The vulnerability is an improper access controls issue in Tanium Comply, which could allow an attacker to access sensitive information. The CVSS score is 7.1 and the severity is HIGH. The vulnerability affects Tanium Comply versions 2.32.0 to 2.32.252, 2.35.0 to 2.35.306, and 2.37.0 to 2.37.308. Defenders should prioritize verifying exposure and applying vendor remediation.

Defensive priority

Defenders should prioritize verifying exposure in Tanium Comply versions 2.32.0 to 2.32.252, 2.35.0 to 2.35.306, and 2.37.0 to 2.37.308, and applying vendor remediation.

Recommended defensive actions

  • Verify Tanium Comply version and apply vendor remediation if necessary
  • Review and update access controls for Tanium Comply
  • Monitor for potential exploitation attempts

Evidence notes

The vulnerability is described as an improper access controls issue in Tanium Comply, with a CVSS score of 7.1 and severity of HIGH. The CVE record and NVD entry provide details on the vulnerability.

Sources and references

Verified primary and authoritative sources

  • CVE-2026-87072 CVE Program record

    Publisher, destination, and source semantics verified

    URL: https://www.cve.org/CVERecord?id=CVE-2026-87072

    CVE Program - Official CVE Program record with source-provided CVE metadata.

  • CVE-2026-87072 NVD vulnerability detail

    Publisher, destination, and source semantics verified

    URL: https://nvd.nist.gov/vuln/detail/CVE-2026-87072

    NIST National Vulnerability Database - Official NIST NVD detail page and source-specific vulnerability assessment.

Supplemental references

  • Source reference

    Unverified legacy reference

    URL: https://security.tanium.com/TAN-2026-030

    3938794e-25f5-4123-a1ba-5cbd7f104512 - Vendor Advisory

Methodology and review provenance

AI-assisted synthesis based on stored public vulnerability evidence. System validation, approval state, and publication status do not by themselves establish human review of this revision. PatchSiren helps prioritize defensive review and does not prove exposure or remediation on any system.