CVE-2026-87105
HighCVSS 8.8Exploitation Probability (EPSS)
Low risk34th percentile - higher than 34% of all known CVEs
Summary
Tanium addressed a SQL injection vulnerability in Threat Response. Technical details were not provided in the description.
Risk Assessment
A SQL injection vulnerability could allow an attacker to manipulate database queries, potentially leading to unauthorized data access or modification. The Threat Response module processes security data, so compromise could have serious consequences.
Recommendation
Apply the fix provided by Tanium for the Threat Response module. It is also recommended to verify that access to the module's interfaces is restricted to trusted users.
Other vulnerabilities in Tanium Threat Response
See all- CVE-2026-108329High
Tanium addressed an unauthorized code execution vulnerability in Threat Response. The flaw may allow code to be executed without appropriate permissions.
- CVE-2026-87116Medium
Tanium addressed a server-side request forgery vulnerability in Threat Response. Technical details were not provided in the description.
- CVE-2026-87113Medium
Tanium addressed an improper access controls vulnerability in Threat Response. Technical details were not provided in the description.
- CVE-2026-87026Low
Tanium addressed an improper access controls vulnerability in Threat Response. The flaw could allow access to resources or functions without the required permissions.
- CVE-2026-75476Low
Tanium addressed a compression bomb vulnerability in Threat Response.
- CVE-2026-6392Low
Tanium addressed an information disclosure vulnerability in Threat Response.
Original NVD description (English source)
Tanium addressed a SQL injection vulnerability in Threat Response.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS