CVE-2026-87105
HighCVSS 8.8Summary
Tanium addressed a SQL injection vulnerability in Threat Response. Technical details were not provided in the description.
Risk Assessment
A SQL injection vulnerability could allow an attacker to manipulate database queries, potentially leading to unauthorized data access or modification. The Threat Response module processes security data, so compromise could have serious consequences.
Recommendation
Apply the fix provided by Tanium for the Threat Response module. It is also recommended to verify that access to the module's interfaces is restricted to trusted users.
Other vulnerabilities in Tanium Threat Response
See all- CVE-2026-87116Medium
Tanium addressed a server-side request forgery vulnerability in Threat Response. Technical details were not provided in the description.
- CVE-2026-87113Medium
Tanium addressed an improper access controls vulnerability in Threat Response. Technical details were not provided in the description.
- CVE-2026-87026Low
Tanium addressed an improper access controls vulnerability in Threat Response. The flaw could allow access to resources or functions without the required permissions.
- CVE-2026-75476Low
Tanium addressed a compression bomb vulnerability in Threat Response.
Original NVD description (English source)
Tanium addressed a SQL injection vulnerability in Threat Response.