# CVE-2026-87034: Tanium Comply SQL injection vulnerability

Source: https://junglewise.ai/threats/cve-2026-87034-tanium-comply-sql-injection-vulnerability  
Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats  
Published: 2026-09-09. Updated: 2026-09-26  
License: CC BY 4.0 with a link back

CVE-2026-87034 · Severity: high · CVSS 8.3 · Published 2026-09-09

Tanium Comply is a compliance and policy management service that works with the Tanium Client to enforce security controls across enterprise systems. A SQL injection vulnerability could allow an attacker with privileged access on a system running the Tanium Client to manipulate SQL queries executed by the Comply service, potentially compromising the integrity of compliance policies and exposing sensitive configuration data.

Technologies: [Tanium Comply](https://junglewise.ai/threats/technologies/comply). Vendors: [Tanium](https://junglewise.ai/threats/vendors/tanium).

## Quick answers

**Is CVE-2026-87034 exploited in the wild?** No. Junglewise Threat Intelligence has no report of CVE-2026-87034 being exploited in the wild.

**How severe is CVE-2026-87034?** High severity, with a CVSS score of 8.3, published 9 September 2026.

**Which products and versions are affected?** Tanium Comply v2.32 through v2.32.251 (2025H1), v2.35 through v2.35.305 (2025H2), v2.37 through v2.37.307 (2026H1).

**Is there a fix for CVE-2026-87034?** A patch was published on 2026-09-09: Updates released: v2.32.252 (Update 24), v2.35.306 (Update 14), v2.37.308 (Update 7) Junglewise finds every place you run it, drafts the upgrade and applies it once you approve.

**How is CVE-2026-87034 attacked?** It is attacked over the network, in a hosted service.

**Am I affected by CVE-2026-87034?** Check whether you run Tanium Comply at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

## Technical details

The vulnerability is a SQL injection flaw in Tanium Comply that permits attackers to tamper with SQL queries executed by the service. The attack requires privileged access to a system running the Tanium Client and user interaction (CVSS vector: AV:N/AC:H/PR:N/UI:R). Successful exploitation grants an attacker the ability to read, modify, and potentially delete data in the underlying database, affecting confidentiality, integrity, and availability. Patches are available in Update 24 for v2.32, Update 14 for v2.35, and Update 7 for v2.37 releases.

## Affected products

- Tanium Comply v2.32 through v2.32.251 (2025H1), v2.35 through v2.35.305 (2025H2), v2.37 through v2.37.307 (2026H1)

## Timeline

- 2026-09-09: disclosed: CVE-2026-87034 published on NVD
- 2026-09-09: patched: Updates released: v2.32.252 (Update 24), v2.35.306 (Update 14), v2.37.308 (Update 7)

## References

- [https://security.tanium.com/TAN-2026-042](https://security.tanium.com/TAN-2026-042)

## Related threats

- [Tanium multiple products improper certificate validation](https://junglewise.ai/threats/cve-2026-121565-tanium-addressed-an-improper-certificate-validation)
- [Tanium Comply improper output sanitization in CSV export](https://junglewise.ai/threats/cve-2026-116647-tanium-addressed-an-improper-output-sanitization-vulnerability)
- [Tanium Comply improper access control](https://junglewise.ai/threats/cve-2026-108302-tanium-addressed-an-improper-access-controls-vulnerability-in)
- [Tanium Comply improper access controls vulnerability](https://junglewise.ai/threats/cve-2026-108301-tanium-addressed-an-improper-access-controls-vulnerability-in)
- [Tanium Comply improper access control in vulnerability sources](https://junglewise.ai/threats/cve-2026-87075-tanium-comply-improper-access-control-in-vulnerability-sources)