CVE Catalog

CVE-2026-108302

MediumCVSS 4.3
Published: Updated: Translated: NVD NIST

Exploitation Probability (EPSS)

Low risk
0.17%

6th percentile - higher than 6% of all known CVEs

Summary

Tanium addressed an improper access controls vulnerability in Comply. It may allow access to functions or data without required permissions.

Risk Assessment

Improper access controls may allow unauthorized users to access protected resources and compliance data.

Recommendation

Update the Comply module to the latest version and review access control and user privilege configuration.

Other vulnerabilities in Comply

See all
Original NVD description (English source)

Tanium addressed an improper access controls vulnerability in Comply.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS