Skip to content
OpenAdvisories
High WID-SEC-2026-3252 21 CVEs

Tanium Endpoint Management Server, Data Service, Enforce, Comply: Mehrere Schwachstellen

Published Sep 8, 2026 · Updated Sep 8, 2026 · de-DE

Vendor: Tanium Product: Endpoint Management Platform: Windows

Summary

Ein Angreifer kann mehrere Schwachstellen in Tanium Endpoint Management ausnutzen, um erweiterte Berechtigungen zu erlangen, Sicherheitsmaßnahmen zu umgehen, beliebigen Code im Kontext des Comply-Dienstes auszuführen, SQL-Injection durchzuführen, Daten zu manipulieren oder offenzulegen oder einen Denial-of-Service-Zustand auszulösen.

Product

Tanium Endpoint Management bietet Echtzeit-Sichtbarkeit und Kontrolle über alle Endpunkte in einer IT-Umgebung.

Vulnerabilities 21

  • High 8.5
    CVE-2026-87023

    Tanium addressed a path traversal vulnerability in Comply.

    Tanium addressed a path traversal vulnerability in Comply.

    Tanium Comply
  • High 8.5
    CVE-2026-87030

    Tanium addressed a path traversal vulnerability in Comply.

    Tanium addressed a path traversal vulnerability in Comply.

    Tanium Comply
  • High 8.3
    CVE-2026-87034

    Tanium addressed a SQL injection vulnerability in Comply.

    Tanium addressed a SQL injection vulnerability in Comply.

    Tanium Comply
  • High 8.1
    CVE-2026-87036

    Tanium addressed an improper access controls vulnerability in Comply.

    Tanium addressed an improper access controls vulnerability in Comply.

    Tanium Comply
  • High 8.1
    CVE-2026-87075

    Tanium addressed an improper access controls vulnerability in Comply.

    Tanium addressed an improper access controls vulnerability in Comply.

    Tanium Comply
  • High 7.7
    CVE-2026-87084

    Tanium addressed a server-side request forgery vulnerability in Enforce.

    Tanium addressed a server-side request forgery vulnerability in Enforce.

    Tanium Enforce
  • High 7.2
    CVE-2026-87021

    Tanium addressed an unauthorized code execution vulnerability in Comply.

    Tanium addressed an unauthorized code execution vulnerability in Comply.

    Tanium Comply
  • High 7.1
    CVE-2026-87072

    Tanium addressed an improper access controls vulnerability in Comply.

    Tanium addressed an improper access controls vulnerability in Comply.

    Tanium Comply
  • High 7.0
    CVE-2026-87088

    Tanium addressed an unauthorized code execution vulnerability in Enforce.

    Tanium addressed an unauthorized code execution vulnerability in Enforce.

    Tanium Enforce
  • Medium 6.6
    CVE-2026-14505

    Tanium addressed a path traversal vulnerability in Tanium Data Service.

    Tanium addressed a path traversal vulnerability in Tanium Data Service.

    Tanium Tanium Data Service
  • Medium 6.5
    CVE-2026-87073

    Tanium addressed an improper access controls vulnerability in Comply.

    Tanium addressed an improper access controls vulnerability in Comply.

    Tanium Comply
  • Medium 6.3
    CVE-2026-87047

    Tanium addressed an improper access controls vulnerability in Comply.

    Tanium addressed an improper access controls vulnerability in Comply.

    Tanium Comply
  • Medium 5.4
    CVE-2026-87025

    Tanium addressed an improper access controls vulnerability in Comply.

    Tanium addressed an improper access controls vulnerability in Comply.

    Tanium Comply
  • Medium 5.4
    CVE-2026-87033

    Tanium addressed an improper access controls vulnerability in Comply.

    Tanium addressed an improper access controls vulnerability in Comply.

    Tanium Comply
  • Medium 5.4
    CVE-2026-87037

    Tanium addressed an improper access controls vulnerability in Comply.

    Tanium addressed an improper access controls vulnerability in Comply.

    Tanium Comply
  • Medium 5.4
    CVE-2026-87048

    Tanium addressed an improper access controls vulnerability in Comply.

    Tanium addressed an improper access controls vulnerability in Comply.

    Tanium Comply
  • Medium 4.3
    CVE-2026-14892

    Tanium addressed an improper access controls vulnerability in Tanium Server.

    Tanium addressed an improper access controls vulnerability in Tanium Server.

    Tanium Tanium Server
  • Medium 4.3
    CVE-2026-87019

    Tanium addressed an improper access controls vulnerability in Comply.

    Tanium addressed an improper access controls vulnerability in Comply.

    Tanium Comply
  • Medium 4.3
    CVE-2026-87032

    Tanium addressed an information disclosure vulnerability in Tanium Server.

    Tanium addressed an information disclosure vulnerability in Tanium Server.

    Tanium Tanium Server
  • Medium 4.3
    CVE-2026-87035

    Tanium addressed an information disclosure vulnerability in Comply.

    Tanium addressed an information disclosure vulnerability in Comply.

    Tanium Comply
  • Medium 4.3
    CVE-2026-87046

    Tanium addressed an improper access controls vulnerability in Comply.

    Tanium addressed an improper access controls vulnerability in Comply.

    Tanium Comply

Revision history

  1. #1

    Initiale Fassung

References