CVE-2026-108301
MediumCVSS 6.0Exploitation Probability (EPSS)
Low risk3th percentile - higher than 3% of all known CVEs
Summary
Tanium addressed an improper access controls vulnerability in Comply. The flaw allowed bypassing authorization mechanisms within this component.
Risk Assessment
Improper access controls may allow unauthorized users to reach functions or data they should not access. In a security management environment this can compromise confidentiality and integrity of data.
Recommendation
Update Tanium Comply to the patched version and review account permissions within the Comply module.
Other vulnerabilities in Tanium Comply
See all- CVE-2026-116647High
Tanium addressed an improper output sanitization vulnerability in Comply. Inadequate output sanitization may allow content injection or unsafe rendering of data.
- CVE-2026-87075High
Tanium addressed an improper access controls vulnerability in Comply.
- CVE-2026-87072High
Tanium addressed an improper access controls vulnerability in Comply.
- CVE-2026-87046Medium
Tanium addressed an improper access controls vulnerability in Comply.
- CVE-2026-87037Medium
Tanium addressed an improper access controls vulnerability in Comply.
- CVE-2026-87036High
Tanium addressed an improper access controls vulnerability in Comply.
- CVE-2026-87035Medium
Tanium addressed an information disclosure vulnerability in Comply.
- CVE-2026-87034High
Tanium addressed a SQL injection vulnerability in Comply.
- CVE-2026-87033Medium
Tanium addressed an improper access controls vulnerability in Comply.
- CVE-2026-87030High
Tanium addressed a path traversal vulnerability in Comply.
Original NVD description (English source)
Tanium addressed an improper access controls vulnerability in Comply.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS