Quick answers
- Is CVE-2026-87046 exploited in the wild?
- No. Junglewise Threat Intelligence has no report of CVE-2026-87046 being exploited in the wild.
- How severe is CVE-2026-87046?
- Medium severity, with a CVSS score of 4.3, published 9 September 2026.
- Which products and versions are affected?
- Tanium Comply 2.32 to 2.32.252 (2025H1 prior to Update 24), 2.35 to 2.35.306 (2025H2 prior to Update 14), 2.37 to 2.37.308 (2026H1 prior to Update 7).
- Is there a fix for CVE-2026-87046?
- A patch was published on 2026-09-09: Updates available for all affected release tracks Junglewise finds every place you run it, drafts the upgrade and applies it once you approve.
- How is CVE-2026-87046 attacked?
- It is attacked over the network, in a hosted service.
- Am I affected by CVE-2026-87046?
- Check whether you run Tanium Comply at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.
Technical details
This is an improper access control vulnerability in Tanium Comply that allows an authenticated user with the "comply report content write" permission to create or modify vulnerability feed settings beyond their intended authorization scope. The vulnerability requires valid authentication and a specific role permission, but no additional user interaction. An attacker with this permission could alter vulnerability feed configurations, potentially compromising the accuracy and integrity of vulnerability data used for compliance and security assessments. Patches are available for all affected release tracks: Update 24 for 2025H1, Update 14 for 2025H2, and Update 7 for 2026H1.
Affected products
- Tanium Comply 2.32 to 2.32.252 (2025H1 prior to Update 24), 2.35 to 2.35.306 (2025H2 prior to Update 14), 2.37 to 2.37.308 (2026H1 prior to Update 7)
Timeline
- 2026-09-09: disclosed
- 2026-09-09: patched: Updates available for all affected release tracks