CVE-2026-87084
HighCVSS 7.7Exploitation Probability (EPSS)
Low risk10th percentile - higher than 10% of all known CVEs
Summary
Tanium addressed a server-side request forgery vulnerability in Enforce.
Risk Assessment
The SSRF vulnerability could have allowed an attacker to send requests to internal resources, potentially leading to information disclosure or further attacks.
Recommendation
Apply updates provided by Tanium for the Enforce product.
Other vulnerabilities in Tanium Enforce
See all- CVE-2026-116662High
Tanium addressed a compression bomb vulnerability in Enforce. The flaw may lead to excessive resource consumption when processing crafted compressed data.
- CVE-2026-116660Medium
Tanium addressed an improper access controls vulnerability in Enforce.
- CVE-2026-116659Medium
Tanium addressed an uncontrolled resource consumption vulnerability in Enforce.
- CVE-2026-116658Medium
Tanium addressed a denial of service vulnerability in Enforce.
- CVE-2026-116657Medium
Tanium addressed a denial of service vulnerability in Enforce.
- CVE-2026-116656High
Tanium addressed an uncontrolled resource consumption vulnerability in Enforce. The flaw may allow resource exhaustion through crafted requests or data.
- CVE-2026-116649High
Tanium addressed an improper output sanitization vulnerability in Enforce. Inadequate output sanitization may allow content injection or unsafe rendering of data.
- CVE-2026-87088High
Tanium addressed an unauthorized code execution vulnerability in Enforce.
Original NVD description (English source)
Tanium addressed a server-side request forgery vulnerability in Enforce.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS