CVE-2026-116647
HighCVSS 7.1Exploitation Probability (EPSS)
Low risk15th percentile - higher than 15% of all known CVEs
Summary
Tanium addressed an improper output sanitization vulnerability in Comply. Inadequate output sanitization may allow content injection or unsafe rendering of data.
Risk Assessment
Exploitation may lead to injection of malicious content or unintended actions in the user interface. This could compromise confidentiality or integrity of data in the Comply module.
Recommendation
Apply the fix provided by Tanium for the Comply module. Verify that all instances have been updated.
Other vulnerabilities in Tanium Comply
See all- CVE-2026-108301Medium
Tanium addressed an improper access controls vulnerability in Comply. The flaw allowed bypassing authorization mechanisms within this component.
- CVE-2026-87075High
Tanium addressed an improper access controls vulnerability in Comply.
- CVE-2026-87072High
Tanium addressed an improper access controls vulnerability in Comply.
- CVE-2026-87046Medium
Tanium addressed an improper access controls vulnerability in Comply.
- CVE-2026-87037Medium
Tanium addressed an improper access controls vulnerability in Comply.
- CVE-2026-87036High
Tanium addressed an improper access controls vulnerability in Comply.
- CVE-2026-87035Medium
Tanium addressed an information disclosure vulnerability in Comply.
- CVE-2026-87034High
Tanium addressed a SQL injection vulnerability in Comply.
- CVE-2026-87033Medium
Tanium addressed an improper access controls vulnerability in Comply.
- CVE-2026-87030High
Tanium addressed a path traversal vulnerability in Comply.
Original NVD description (English source)
Tanium addressed an improper output sanitization vulnerability in Comply.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS