CVE-2026-87024

HighCVSS 7.2

Published: 16/09/2026(UTC)Updated: 18/09/2026(UTC)Translated: 17/09/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.31%

24th percentile - higher than 24% of all known CVEs

Summary

Tanium addressed a SQL injection vulnerability in Asset. Technical details were not provided in the description.

Risk Assessment

A SQL injection vulnerability could allow an attacker to manipulate database queries, potentially leading to unauthorized access to or modification of asset inventory data. The Asset module stores resource information, so compromise could reveal infrastructure details.

Recommendation

Apply the fix provided by Tanium for the Asset module. It is also recommended to restrict access to the module's interfaces to trusted users only.

Other vulnerabilities in Tanium Asset

CVE-2026-86865High
Tanium addressed a SQL injection vulnerability in Asset. Technical details were not provided in the description.

Original NVD description (English source)

Tanium addressed a SQL injection vulnerability in Asset.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS